terraform_plan.txt

module.operator_service.module.bazel.data.external.bazel_bin: Reading...
module.operator_service.module.bazel.data.external.workspace: Reading...
module.operator_service.module.bazel.data.external.bazel_bin: Read complete after 0s [id=-]
module.operator_service.module.bazel.data.external.workspace: Read complete after 0s [id=-]
module.operator_service.module.worker_service.data.aws_iam_policy.SSMManagedInstanceCore: Reading...
module.operator_service.data.aws_caller_identity.current: Reading...
module.operator_service.module.vpc[0].data.aws_availability_zones.avail: Reading...
module.operator_service.module.worker_service.data.aws_ami.worker_image: Reading...
module.operator_service.module.vpc[0].data.aws_region.current: Reading...
module.operator_service.module.vpc[0].data.aws_region.current: Read complete after 0s [id=us-west-2]
module.operator_service.module.worker_dashboard.data.aws_caller_identity.current: Reading...
module.operator_service.module.vpc[0].data.aws_availability_zones.avail: Read complete after 1s [id=us-west-2]
module.operator_service.module.vpc[0].data.aws_availability_zone.all["us-west-2b"]: Reading...
module.operator_service.module.vpc[0].data.aws_availability_zone.all["us-west-2c"]: Reading...
module.operator_service.module.vpc[0].data.aws_availability_zone.all["us-west-2d"]: Reading...
module.operator_service.module.vpc[0].data.aws_availability_zone.all["us-west-2a"]: Reading...
module.operator_service.module.worker_dashboard.data.aws_caller_identity.current: Read complete after 1s [id=771945457201]
module.operator_service.data.aws_caller_identity.current: Read complete after 1s [id=771945457201]
module.operator_service.module.vpc[0].data.aws_availability_zone.all["us-west-2b"]: Read complete after 0s [id=us-west-2b]
module.operator_service.module.vpc[0].data.aws_availability_zone.all["us-west-2c"]: Read complete after 0s [id=us-west-2c]
module.operator_service.module.vpc[0].data.aws_availability_zone.all["us-west-2a"]: Read complete after 0s [id=us-west-2a]
module.operator_service.module.vpc[0].data.aws_availability_zone.all["us-west-2d"]: Read complete after 0s [id=us-west-2d]
module.operator_service.module.worker_service.data.aws_ami.worker_image: Read complete after 1s [id=ami-0cadbb1a3834f94f4]
module.operator_service.module.worker_service.data.aws_iam_policy.SSMManagedInstanceCore: Still reading... [10s elapsed]
module.operator_service.module.worker_service.data.aws_iam_policy.SSMManagedInstanceCore: Read complete after 17s [id=arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
 <= read (data resources)

Terraform will perform the following actions:

  # module.operator_service.module.asginstances_db.aws_dynamodb_table.asginstances_db_table will be created
  + resource "aws_dynamodb_table" "asginstances_db_table" {
      + arn              = (known after apply)
      + billing_mode     = "PAY_PER_REQUEST"
      + hash_key         = "InstanceName"
      + id               = (known after apply)
      + name             = "aggregation-service-dev-env-AsgInstances"
      + read_capacity    = (known after apply)
      + stream_arn       = (known after apply)
      + stream_label     = (known after apply)
      + stream_view_type = (known after apply)
      + tags             = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-AsgInstances"
          + "role"        = "asginstancesdb"
          + "service"     = "operator-service"
        }
      + tags_all         = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-AsgInstances"
          + "role"        = "asginstancesdb"
          + "service"     = "operator-service"
        }
      + write_capacity   = (known after apply)

      + attribute {
          + name = "InstanceName"
          + type = "S"
        }

      + point_in_time_recovery {
          + enabled = true
        }

      + server_side_encryption {
          + enabled     = (known after apply)
          + kms_key_arn = (known after apply)
        }

      + ttl {
          + attribute_name = "Ttl"
          + enabled        = true
        }
    }

  # module.operator_service.module.assume_role_parameter.aws_ssm_parameter.worker_parameter will be created
  + resource "aws_ssm_parameter" "worker_parameter" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-COORDINATOR_ROLE"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-COORDINATOR_ROLE"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-COORDINATOR_ROLE"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.assume_role_parameter.aws_ssm_parameter.worker_parameter_legacy will be created
  + resource "aws_ssm_parameter" "worker_parameter_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/assume_role_arn"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/assume_role_arn"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/assume_role_arn"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.coordinator_a_assume_role_parameter.aws_ssm_parameter.worker_parameter will be created
  + resource "aws_ssm_parameter" "worker_parameter" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-COORDINATOR_A_ROLE"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-COORDINATOR_A_ROLE"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-COORDINATOR_A_ROLE"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.coordinator_a_assume_role_parameter.aws_ssm_parameter.worker_parameter_legacy will be created
  + resource "aws_ssm_parameter" "worker_parameter_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/coordinator_a_assume_role_arn"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/coordinator_a_assume_role_arn"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/coordinator_a_assume_role_arn"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.coordinator_b_assume_role_parameter.aws_ssm_parameter.worker_parameter will be created
  + resource "aws_ssm_parameter" "worker_parameter" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-COORDINATOR_B_ROLE"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-COORDINATOR_B_ROLE"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-COORDINATOR_B_ROLE"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.coordinator_b_assume_role_parameter.aws_ssm_parameter.worker_parameter_legacy will be created
  + resource "aws_ssm_parameter" "worker_parameter_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/coordinator_b_assume_role_arn"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/coordinator_b_assume_role_arn"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/coordinator_b_assume_role_arn"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.frontend.aws_apigatewayv2_api.frontend_api_gateway will be created
  + resource "aws_apigatewayv2_api" "frontend_api_gateway" {
      + api_endpoint                 = (known after apply)
      + api_key_selection_expression = "$request.header.x-api-key"
      + arn                          = (known after apply)
      + description                  = "Aggregate Service Frontend API"
      + execution_arn                = (known after apply)
      + id                           = (known after apply)
      + name                         = "aggregation-service-dev-env-us-west-2-frontend-api"
      + protocol_type                = "HTTP"
      + route_selection_expression   = "$request.method $request.path"
      + tags_all                     = (known after apply)
    }

  # module.operator_service.module.frontend.aws_apigatewayv2_integration.create_job_api_gateway_integration will be created
  + resource "aws_apigatewayv2_integration" "create_job_api_gateway_integration" {
      + api_id                                    = (known after apply)
      + connection_type                           = "INTERNET"
      + id                                        = (known after apply)
      + integration_method                        = "POST"
      + integration_response_selection_expression = (known after apply)
      + integration_type                          = "AWS_PROXY"
      + integration_uri                           = (known after apply)
      + payload_format_version                    = "1.0"
      + timeout_milliseconds                      = (known after apply)
    }

  # module.operator_service.module.frontend.aws_apigatewayv2_integration.get_job_api_gateway_integration will be created
  + resource "aws_apigatewayv2_integration" "get_job_api_gateway_integration" {
      + api_id                                    = (known after apply)
      + connection_type                           = "INTERNET"
      + id                                        = (known after apply)
      + integration_method                        = "POST"
      + integration_response_selection_expression = (known after apply)
      + integration_type                          = "AWS_PROXY"
      + integration_uri                           = (known after apply)
      + payload_format_version                    = "1.0"
      + timeout_milliseconds                      = (known after apply)
    }

  # module.operator_service.module.frontend.aws_apigatewayv2_route.create_job_api_gateway_route will be created
  + resource "aws_apigatewayv2_route" "create_job_api_gateway_route" {
      + api_id             = (known after apply)
      + api_key_required   = false
      + authorization_type = "AWS_IAM"
      + id                 = (known after apply)
      + route_key          = "POST /v1alpha/createJob"
      + target             = (known after apply)
    }

  # module.operator_service.module.frontend.aws_apigatewayv2_route.get_job_api_gateway_route will be created
  + resource "aws_apigatewayv2_route" "get_job_api_gateway_route" {
      + api_id             = (known after apply)
      + api_key_required   = false
      + authorization_type = "AWS_IAM"
      + id                 = (known after apply)
      + route_key          = "GET /v1alpha/getJob"
      + target             = (known after apply)
    }

  # module.operator_service.module.frontend.aws_apigatewayv2_stage.frontend_api_gateway_stage will be created
  + resource "aws_apigatewayv2_stage" "frontend_api_gateway_stage" {
      + api_id        = (known after apply)
      + arn           = (known after apply)
      + auto_deploy   = true
      + deployment_id = (known after apply)
      + execution_arn = (known after apply)
      + id            = (known after apply)
      + invoke_url    = (known after apply)
      + name          = "stage"
      + tags_all      = (known after apply)

      + access_log_settings {
          + destination_arn = (known after apply)
          + format          = jsonencode(
                {
                  + httpMethod      = "$context.httpMethod"
                  + requestId       = "$context.requestId"
                  + requestTime     = "$context.requestTime"
                  + responseLatency = "$context.responseLatency"
                  + responseLength  = "$context.responseLength"
                  + routeKey        = "$context.routeKey"
                  + status          = "$context.status"
                }
            )
        }

      + default_route_settings {
          + data_trace_enabled       = false
          + detailed_metrics_enabled = true
          + logging_level            = "INFO"
          + throttling_burst_limit   = 5000
          + throttling_rate_limit    = 10000
        }
    }

  # module.operator_service.module.frontend.aws_cloudwatch_log_group.create_job_lambda_cloudwatch will be created
  + resource "aws_cloudwatch_log_group" "create_job_lambda_cloudwatch" {
      + arn               = (known after apply)
      + id                = (known after apply)
      + name              = "/aws/lambda/aggregation-service-dev-env-create-job"
      + retention_in_days = 90
      + tags_all          = (known after apply)
    }

  # module.operator_service.module.frontend.aws_cloudwatch_log_group.frontend_api_gateway_log_group will be created
  + resource "aws_cloudwatch_log_group" "frontend_api_gateway_log_group" {
      + arn               = (known after apply)
      + id                = (known after apply)
      + name              = "/aws/vendedlogs/apigateway/aggregation-service-dev-env-us-west-2-frontend-api"
      + retention_in_days = 90
      + tags_all          = (known after apply)
    }

  # module.operator_service.module.frontend.aws_cloudwatch_log_group.get_job_lambda_cloudwatch will be created
  + resource "aws_cloudwatch_log_group" "get_job_lambda_cloudwatch" {
      + arn               = (known after apply)
      + id                = (known after apply)
      + name              = "/aws/lambda/aggregation-service-dev-env-get-job"
      + retention_in_days = 90
      + tags_all          = (known after apply)
    }

  # module.operator_service.module.frontend.aws_cloudwatch_metric_alarm.change_handler_dlq_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "change_handler_dlq_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Dlq mgs sent over 0.0%"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_change_handler_dlq_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "QueueName" = "aggregation-service-dev-env-ChangeHandlerDeadLetter"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "NumberOfMessagesReceived"
      + namespace                             = "AWS/SQS"
      + period                                = 60
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.frontend.aws_cloudwatch_metric_alarm.change_handler_latency_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "change_handler_latency_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Max latency over 9999ms"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_change_handler_latency_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "FunctionName" = "aggregation-service-dev-env-ChangeHandler"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "IteratorAge"
      + namespace                             = "AWS/Lambda"
      + period                                = 60
      + statistic                             = "Maximum"
      + tags_all                              = (known after apply)
      + threshold                             = 9999
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.frontend.aws_cloudwatch_metric_alarm.create_job_key_lambda_max_duration_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "create_job_key_lambda_max_duration_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Lambda duration over 9999ms"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_create_job_key_lambda_max_duration_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "FunctionName" = "aggregation-service-dev-env-create-job"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "Duration"
      + namespace                             = "AWS/Lambda"
      + period                                = 60
      + statistic                             = "Maximum"
      + tags_all                              = (known after apply)
      + threshold                             = 9999
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.frontend.aws_cloudwatch_metric_alarm.create_job_key_lambda_max_throttles_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "create_job_key_lambda_max_throttles_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Lambda throttles over 10"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_create_job_key_lambda_max_throttles_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "FunctionName" = "aggregation-service-dev-env-create-job"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "Throttles"
      + namespace                             = "AWS/Lambda"
      + period                                = 60
      + statistic                             = "Maximum"
      + tags_all                              = (known after apply)
      + threshold                             = 10
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.frontend.aws_cloudwatch_metric_alarm.create_job_lambda_error_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "create_job_lambda_error_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Lambda errors over 0.0%"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_create_job_lambda_error_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "FunctionName" = "aggregation-service-dev-env-create-job"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "Errors"
      + namespace                             = "AWS/Lambda"
      + period                                = 60
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.frontend.aws_cloudwatch_metric_alarm.frontend_api_4xx_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "frontend_api_4xx_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "4xx errors over 0.0%"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_frontend_api_4xx_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = (known after apply)
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "4XXError"
      + namespace                             = "AWS/ApiGateway"
      + period                                = 60
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.frontend.aws_cloudwatch_metric_alarm.frontend_api_5xx_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "frontend_api_5xx_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "5xx errors over 0.0%"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_frontend_api_5xx_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = (known after apply)
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "5XXError"
      + namespace                             = "AWS/ApiGateway"
      + period                                = 60
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.frontend.aws_cloudwatch_metric_alarm.frontend_api_max_latency_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "frontend_api_max_latency_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Max latency over 5000ms"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_frontend_api_max_latency_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = (known after apply)
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "Latency"
      + namespace                             = "AWS/ApiGateway"
      + period                                = 60
      + statistic                             = "Maximum"
      + tags_all                              = (known after apply)
      + threshold                             = 5000
      + treat_missing_data                    = "missing"
      + unit                                  = "Milliseconds"
    }

  # module.operator_service.module.frontend.aws_cloudwatch_metric_alarm.get_job_key_lambda_max_duration_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "get_job_key_lambda_max_duration_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Lambda duration over 9999ms"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_get_job_key_lambda_max_duration_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "FunctionName" = "aggregation-service-dev-env-get-job"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "Duration"
      + namespace                             = "AWS/Lambda"
      + period                                = 60
      + statistic                             = "Maximum"
      + tags_all                              = (known after apply)
      + threshold                             = 9999
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.frontend.aws_cloudwatch_metric_alarm.get_job_key_lambda_max_throttles_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "get_job_key_lambda_max_throttles_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Lambda throttles over 10"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_get_job_key_lambda_max_throttles_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "FunctionName" = "aggregation-service-dev-env-get-job"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "Throttles"
      + namespace                             = "AWS/Lambda"
      + period                                = 60
      + statistic                             = "Maximum"
      + tags_all                              = (known after apply)
      + threshold                             = 10
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.frontend.aws_cloudwatch_metric_alarm.get_job_lambda_error_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "get_job_lambda_error_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Lambda errors over 0.0%"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_get_job_lambda_error_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "FunctionName" = "aggregation-service-dev-env-get-job"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "Errors"
      + namespace                             = "AWS/Lambda"
      + period                                = 60
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.frontend.aws_iam_policy.change_handler_jobqueue_write_access will be created
  + resource "aws_iam_policy" "change_handler_jobqueue_write_access" {
      + arn       = (known after apply)
      + id        = (known after apply)
      + name      = (known after apply)
      + path      = "/"
      + policy    = (known after apply)
      + policy_id = (known after apply)
      + tags_all  = (known after apply)
    }

  # module.operator_service.module.frontend.aws_iam_policy.change_handler_metadata_db_stream_read_access will be created
  + resource "aws_iam_policy" "change_handler_metadata_db_stream_read_access" {
      + arn       = (known after apply)
      + id        = (known after apply)
      + name      = (known after apply)
      + path      = "/"
      + policy    = (known after apply)
      + policy_id = (known after apply)
      + tags_all  = (known after apply)
    }

  # module.operator_service.module.frontend.aws_iam_policy.lambda_log_policy will be created
  + resource "aws_iam_policy" "lambda_log_policy" {
      + arn       = (known after apply)
      + id        = (known after apply)
      + name      = (known after apply)
      + path      = "/"
      + policy    = jsonencode(
            {
              + Statement = [
                  + {
                      + Action   = [
                          + "logs:CreateLogGroup",
                          + "logs:CreateLogStream",
                          + "logs:PutLogEvents",
                        ]
                      + Effect   = "Allow"
                      + Resource = "*"
                    },
                ]
              + Version   = "2012-10-17"
            }
        )
      + policy_id = (known after apply)
      + tags_all  = (known after apply)
    }

  # module.operator_service.module.frontend.aws_iam_role.change_handler_lambda_role will be created
  + resource "aws_iam_role" "change_handler_lambda_role" {
      + arn                   = (known after apply)
      + assume_role_policy    = jsonencode(
            {
              + Statement = [
                  + {
                      + Action    = "sts:AssumeRole"
                      + Effect    = "Allow"
                      + Principal = {
                          + Service = "lambda.amazonaws.com"
                        }
                    },
                ]
              + Version   = "2012-10-17"
            }
        )
      + create_date           = (known after apply)
      + force_detach_policies = false
      + id                    = (known after apply)
      + managed_policy_arns   = (known after apply)
      + max_session_duration  = 3600
      + name                  = "aggregation-service-dev-env-ChangeHandlerRole"
      + name_prefix           = (known after apply)
      + path                  = "/"
      + tags_all              = (known after apply)
      + unique_id             = (known after apply)

      + inline_policy {
          + name   = (known after apply)
          + policy = (known after apply)
        }
    }

  # module.operator_service.module.frontend.aws_iam_role.dlq_cleanup_lambda_role will be created
  + resource "aws_iam_role" "dlq_cleanup_lambda_role" {
      + arn                   = (known after apply)
      + assume_role_policy    = jsonencode(
            {
              + Statement = [
                  + {
                      + Action    = "sts:AssumeRole"
                      + Effect    = "Allow"
                      + Principal = {
                          + Service = "lambda.amazonaws.com"
                        }
                    },
                ]
              + Version   = "2012-10-17"
            }
        )
      + create_date           = (known after apply)
      + force_detach_policies = false
      + id                    = (known after apply)
      + managed_policy_arns   = (known after apply)
      + max_session_duration  = 3600
      + name                  = "aggregation-service-dev-env-DeadLetterCleanupRole"
      + name_prefix           = (known after apply)
      + path                  = "/"
      + tags_all              = (known after apply)
      + unique_id             = (known after apply)

      + inline_policy {
          + name   = (known after apply)
          + policy = (known after apply)
        }
    }

  # module.operator_service.module.frontend.aws_iam_role.frontend_lambda_role will be created
  + resource "aws_iam_role" "frontend_lambda_role" {
      + arn                   = (known after apply)
      + assume_role_policy    = jsonencode(
            {
              + Statement = [
                  + {
                      + Action    = "sts:AssumeRole"
                      + Effect    = "Allow"
                      + Principal = {
                          + Service = "lambda.amazonaws.com"
                        }
                    },
                ]
              + Version   = "2012-10-17"
            }
        )
      + create_date           = (known after apply)
      + force_detach_policies = false
      + id                    = (known after apply)
      + managed_policy_arns   = (known after apply)
      + max_session_duration  = 3600
      + name                  = "aggregation-service-dev-env-FrontendRole"
      + name_prefix           = (known after apply)
      + path                  = "/"
      + tags_all              = (known after apply)
      + unique_id             = (known after apply)

      + inline_policy {
          + name   = (known after apply)
          + policy = (known after apply)
        }
    }

  # module.operator_service.module.frontend.aws_iam_role_policy.change_handler_dlq_write_access will be created
  + resource "aws_iam_role_policy" "change_handler_dlq_write_access" {
      + id     = (known after apply)
      + name   = (known after apply)
      + policy = (known after apply)
      + role   = "aggregation-service-dev-env-ChangeHandlerRole"
    }

  # module.operator_service.module.frontend.aws_iam_role_policy.dlq_cleanup_lambda_dynamo_access will be created
  + resource "aws_iam_role_policy" "dlq_cleanup_lambda_dynamo_access" {
      + id     = (known after apply)
      + name   = (known after apply)
      + policy = (known after apply)
      + role   = (known after apply)
    }

  # module.operator_service.module.frontend.aws_iam_role_policy.dlq_cleanup_lambda_dynamo_stream_access will be created
  + resource "aws_iam_role_policy" "dlq_cleanup_lambda_dynamo_stream_access" {
      + id     = (known after apply)
      + name   = (known after apply)
      + policy = (known after apply)
      + role   = (known after apply)
    }

  # module.operator_service.module.frontend.aws_iam_role_policy.dlq_cleanup_lambda_sqs_access will be created
  + resource "aws_iam_role_policy" "dlq_cleanup_lambda_sqs_access" {
      + id     = (known after apply)
      + name   = (known after apply)
      + policy = (known after apply)
      + role   = (known after apply)
    }

  # module.operator_service.module.frontend.aws_iam_role_policy.frontend_policy will be created
  + resource "aws_iam_role_policy" "frontend_policy" {
      + id     = (known after apply)
      + name   = "frontend_policy"
      + policy = (known after apply)
      + role   = (known after apply)
    }

  # module.operator_service.module.frontend.aws_iam_role_policy_attachment.change_handler_jobqueue_write_access_attachment will be created
  + resource "aws_iam_role_policy_attachment" "change_handler_jobqueue_write_access_attachment" {
      + id         = (known after apply)
      + policy_arn = (known after apply)
      + role       = "aggregation-service-dev-env-ChangeHandlerRole"
    }

  # module.operator_service.module.frontend.aws_iam_role_policy_attachment.change_handler_lambda_log_policy_attachment will be created
  + resource "aws_iam_role_policy_attachment" "change_handler_lambda_log_policy_attachment" {
      + id         = (known after apply)
      + policy_arn = (known after apply)
      + role       = "aggregation-service-dev-env-ChangeHandlerRole"
    }

  # module.operator_service.module.frontend.aws_iam_role_policy_attachment.change_handler_metadata_db_stream_read_access_attachment will be created
  + resource "aws_iam_role_policy_attachment" "change_handler_metadata_db_stream_read_access_attachment" {
      + id         = (known after apply)
      + policy_arn = (known after apply)
      + role       = "aggregation-service-dev-env-ChangeHandlerRole"
    }

  # module.operator_service.module.frontend.aws_iam_role_policy_attachment.dlq_cleanup_lambda_log_policy_attachment will be created
  + resource "aws_iam_role_policy_attachment" "dlq_cleanup_lambda_log_policy_attachment" {
      + id         = (known after apply)
      + policy_arn = (known after apply)
      + role       = "aggregation-service-dev-env-DeadLetterCleanupRole"
    }

  # module.operator_service.module.frontend.aws_iam_role_policy_attachment.frontend_lambda_log_policy_attachment will be created
  + resource "aws_iam_role_policy_attachment" "frontend_lambda_log_policy_attachment" {
      + id         = (known after apply)
      + policy_arn = (known after apply)
      + role       = "aggregation-service-dev-env-FrontendRole"
    }

  # module.operator_service.module.frontend.aws_lambda_event_source_mapping.change_handler_metadata_db_stream_mapping will be created
  + resource "aws_lambda_event_source_mapping" "change_handler_metadata_db_stream_mapping" {
      + bisect_batch_on_function_error = true
      + enabled                        = true
      + event_source_arn               = (known after apply)
      + function_arn                   = (known after apply)
      + function_name                  = (known after apply)
      + id                             = (known after apply)
      + last_modified                  = (known after apply)
      + last_processing_result         = (known after apply)
      + maximum_record_age_in_seconds  = 300
      + maximum_retry_attempts         = 10
      + parallelization_factor         = (known after apply)
      + starting_position              = "LATEST"
      + state                          = (known after apply)
      + state_transition_reason        = (known after apply)
      + uuid                           = (known after apply)

      + destination_config {
          + on_failure {
              + destination_arn = (known after apply)
            }
        }
    }

  # module.operator_service.module.frontend.aws_lambda_event_source_mapping.dlq_cleanup_lambda_event_mapping will be created
  + resource "aws_lambda_event_source_mapping" "dlq_cleanup_lambda_event_mapping" {
      + enabled                       = true
      + event_source_arn              = (known after apply)
      + function_arn                  = (known after apply)
      + function_name                 = (known after apply)
      + id                            = (known after apply)
      + last_modified                 = (known after apply)
      + last_processing_result        = (known after apply)
      + maximum_record_age_in_seconds = (known after apply)
      + maximum_retry_attempts        = (known after apply)
      + parallelization_factor        = (known after apply)
      + state                         = (known after apply)
      + state_transition_reason       = (known after apply)
      + uuid                          = (known after apply)
    }

  # module.operator_service.module.frontend.aws_lambda_function.change_handler_lambda will be created
  + resource "aws_lambda_function" "change_handler_lambda" {
      + architectures                  = (known after apply)
      + arn                            = (known after apply)
      + function_name                  = "aggregation-service-dev-env-ChangeHandler"
      + handler                        = "com.google.scp.operator.frontend.service.aws.DynamoStreamsJobMetadataHandler"
      + id                             = (known after apply)
      + invoke_arn                     = (known after apply)
      + last_modified                  = (known after apply)
      + memory_size                    = 2048
      + package_type                   = "Zip"
      + publish                        = false
      + qualified_arn                  = (known after apply)
      + reserved_concurrent_executions = -1
      + role                           = (known after apply)
      + runtime                        = "java11"
      + s3_bucket                      = (known after apply)
      + s3_key                         = "app/change_handler_lambda.jar"
      + signing_job_arn                = (known after apply)
      + signing_profile_version_arn    = (known after apply)
      + source_code_hash               = "uL0802rxVfLbTW8gByzm+trKa38jj57gWl13AWtdnXg="
      + source_code_size               = (known after apply)
      + tags                           = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-ChangeHandler"
          + "role"        = "change-handler"
          + "service"     = "operator-service"
        }
      + tags_all                       = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-ChangeHandler"
          + "role"        = "change-handler"
          + "service"     = "operator-service"
        }
      + timeout                        = 15
      + version                        = (known after apply)

      + environment {
          + variables = (known after apply)
        }

      + tracing_config {
          + mode = (known after apply)
        }
    }

  # module.operator_service.module.frontend.aws_lambda_function.create_job_lambda will be created
  + resource "aws_lambda_function" "create_job_lambda" {
      + architectures                  = (known after apply)
      + arn                            = (known after apply)
      + function_name                  = "aggregation-service-dev-env-create-job"
      + handler                        = "com.google.scp.operator.frontend.service.aws.CreateJobApiGatewayHandler"
      + id                             = (known after apply)
      + invoke_arn                     = (known after apply)
      + last_modified                  = (known after apply)
      + memory_size                    = 1024
      + package_type                   = "Zip"
      + publish                        = true
      + qualified_arn                  = (known after apply)
      + reserved_concurrent_executions = -1
      + role                           = (known after apply)
      + runtime                        = "java11"
      + s3_bucket                      = (known after apply)
      + s3_key                         = "app/frontend_lambdas.jar"
      + signing_job_arn                = (known after apply)
      + signing_profile_version_arn    = (known after apply)
      + source_code_hash               = "dj6SS0FEBKjZ/LzZ8bIimy460hN+U6TkoPnsMFqhmSA="
      + source_code_size               = (known after apply)
      + tags_all                       = (known after apply)
      + timeout                        = 10
      + version                        = (known after apply)

      + environment {
          + variables = (known after apply)
        }

      + tracing_config {
          + mode = (known after apply)
        }
    }

  # module.operator_service.module.frontend.aws_lambda_function.dlq_cleanup_lambda will be created
  + resource "aws_lambda_function" "dlq_cleanup_lambda" {
      + architectures                  = (known after apply)
      + arn                            = (known after apply)
      + function_name                  = "aggregation-service-dev-env-DeadLetterCleanup"
      + handler                        = "com.google.scp.operator.frontend.service.aws.AwsFailedJobQueueWriteCleanup"
      + id                             = (known after apply)
      + invoke_arn                     = (known after apply)
      + last_modified                  = (known after apply)
      + memory_size                    = 2048
      + package_type                   = "Zip"
      + publish                        = false
      + qualified_arn                  = (known after apply)
      + reserved_concurrent_executions = -1
      + role                           = (known after apply)
      + runtime                        = "java11"
      + s3_bucket                      = (known after apply)
      + s3_key                         = "app/failed_job_queue_write_cleanup_lambda.jar"
      + signing_job_arn                = (known after apply)
      + signing_profile_version_arn    = (known after apply)
      + source_code_hash               = "19ugS1/OwQxpDZ+kvYRTzdRrq+DCusEHnqtc/2Y+FxM="
      + source_code_size               = (known after apply)
      + tags_all                       = (known after apply)
      + timeout                        = 15
      + version                        = (known after apply)

      + environment {
          + variables = (known after apply)
        }

      + tracing_config {
          + mode = (known after apply)
        }
    }

  # module.operator_service.module.frontend.aws_lambda_function.get_job_lambda will be created
  + resource "aws_lambda_function" "get_job_lambda" {
      + architectures                  = (known after apply)
      + arn                            = (known after apply)
      + function_name                  = "aggregation-service-dev-env-get-job"
      + handler                        = "com.google.scp.operator.frontend.service.aws.GetJobApiGatewayHandler"
      + id                             = (known after apply)
      + invoke_arn                     = (known after apply)
      + last_modified                  = (known after apply)
      + memory_size                    = 1024
      + package_type                   = "Zip"
      + publish                        = true
      + qualified_arn                  = (known after apply)
      + reserved_concurrent_executions = -1
      + role                           = (known after apply)
      + runtime                        = "java11"
      + s3_bucket                      = (known after apply)
      + s3_key                         = "app/frontend_lambdas.jar"
      + signing_job_arn                = (known after apply)
      + signing_profile_version_arn    = (known after apply)
      + source_code_hash               = "dj6SS0FEBKjZ/LzZ8bIimy460hN+U6TkoPnsMFqhmSA="
      + source_code_size               = (known after apply)
      + tags_all                       = (known after apply)
      + timeout                        = 10
      + version                        = (known after apply)

      + environment {
          + variables = (known after apply)
        }

      + tracing_config {
          + mode = (known after apply)
        }
    }

  # module.operator_service.module.frontend.aws_lambda_permission.create_job_api_gateway_permission will be created
  + resource "aws_lambda_permission" "create_job_api_gateway_permission" {
      + action        = "lambda:InvokeFunction"
      + function_name = "aggregation-service-dev-env-create-job"
      + id            = (known after apply)
      + principal     = "apigateway.amazonaws.com"
      + source_arn    = (known after apply)
      + statement_id  = "AllowCreateJobExecutionFromGateway"
    }

  # module.operator_service.module.frontend.aws_lambda_permission.get_job_api_gateway_permission will be created
  + resource "aws_lambda_permission" "get_job_api_gateway_permission" {
      + action        = "lambda:InvokeFunction"
      + function_name = "aggregation-service-dev-env-get-job"
      + id            = (known after apply)
      + principal     = "apigateway.amazonaws.com"
      + source_arn    = (known after apply)
      + statement_id  = "AllowGetJobExecutionFromGateway"
    }

  # module.operator_service.module.frontend.aws_s3_bucket.lambda_package_storage will be created
  + resource "aws_s3_bucket" "lambda_package_storage" {
      + acceleration_status         = (known after apply)
      + acl                         = "private"
      + arn                         = (known after apply)
      + bucket                      = (known after apply)
      + bucket_domain_name          = (known after apply)
      + bucket_prefix               = "aggregation-service-dev-env-frontend-"
      + bucket_regional_domain_name = (known after apply)
      + force_destroy               = false
      + hosted_zone_id              = (known after apply)
      + id                          = (known after apply)
      + object_lock_enabled         = (known after apply)
      + region                      = (known after apply)
      + request_payer               = (known after apply)
      + tags                        = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-frontend-"
          + "role"        = "frontend-lambda-package-storage"
          + "service"     = "operator-service"
        }
      + tags_all                    = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-frontend-"
          + "role"        = "frontend-lambda-package-storage"
          + "service"     = "operator-service"
        }
      + website_domain              = (known after apply)
      + website_endpoint            = (known after apply)

      + object_lock_configuration {
          + object_lock_enabled = (known after apply)

          + rule {
              + default_retention {
                  + days  = (known after apply)
                  + mode  = (known after apply)
                  + years = (known after apply)
                }
            }
        }

      + server_side_encryption_configuration {
          + rule {
              + bucket_key_enabled = (known after apply)

              + apply_server_side_encryption_by_default {
                  + kms_master_key_id = (known after apply)
                  + sse_algorithm     = (known after apply)
                }
            }
        }

      + versioning {
          + enabled    = (known after apply)
          + mfa_delete = (known after apply)
        }
    }

  # module.operator_service.module.frontend.aws_s3_bucket_object.change_handler_lambda_s3_jar will be created
  + resource "aws_s3_bucket_object" "change_handler_lambda_s3_jar" {
      + acl                    = "private"
      + bucket                 = (known after apply)
      + bucket_key_enabled     = (known after apply)
      + content_type           = (known after apply)
      + etag                   = (known after apply)
      + force_destroy          = false
      + id                     = (known after apply)
      + key                    = "app/change_handler_lambda.jar"
      + kms_key_id             = (known after apply)
      + server_side_encryption = (known after apply)
      + source                 = "../../jars/AwsChangeHandlerLambda_2.0.0.jar"
      + source_hash            = "9268424a68d601a8e967f2aae1c2a09d"
      + storage_class          = (known after apply)
      + tags_all               = (known after apply)
      + version_id             = (known after apply)
    }

  # module.operator_service.module.frontend.aws_s3_bucket_object.dlq_cleanup_lambda_s3_jar will be created
  + resource "aws_s3_bucket_object" "dlq_cleanup_lambda_s3_jar" {
      + acl                    = "private"
      + bucket                 = (known after apply)
      + bucket_key_enabled     = (known after apply)
      + content_type           = (known after apply)
      + etag                   = (known after apply)
      + force_destroy          = false
      + id                     = (known after apply)
      + key                    = "app/failed_job_queue_write_cleanup_lambda.jar"
      + kms_key_id             = (known after apply)
      + server_side_encryption = (known after apply)
      + source                 = "../../jars/AwsFrontendCleanupLambda_2.0.0.jar"
      + source_hash            = "98b249591faecc71e8b3ef4d33c9eb7f"
      + storage_class          = (known after apply)
      + tags_all               = (known after apply)
      + version_id             = (known after apply)
    }

  # module.operator_service.module.frontend.aws_s3_bucket_object.frontend_lambdas_package will be created
  + resource "aws_s3_bucket_object" "frontend_lambdas_package" {
      + acl                    = "private"
      + bucket                 = (known after apply)
      + bucket_key_enabled     = (known after apply)
      + content_type           = (known after apply)
      + etag                   = (known after apply)
      + force_destroy          = false
      + id                     = (known after apply)
      + key                    = "app/frontend_lambdas.jar"
      + kms_key_id             = (known after apply)
      + server_side_encryption = (known after apply)
      + source                 = "../../jars/AwsApiGatewayFrontend_2.0.0.jar"
      + source_hash            = "260082de46b8ff1d4e8cb63777012137"
      + storage_class          = (known after apply)
      + tags_all               = (known after apply)
      + version_id             = (known after apply)
    }

  # module.operator_service.module.frontend.aws_s3_bucket_policy.lambda_package_storage_bucket_deny_non_ssl_requests will be created
  + resource "aws_s3_bucket_policy" "lambda_package_storage_bucket_deny_non_ssl_requests" {
      + bucket = (known after apply)
      + id     = (known after apply)
      + policy = (known after apply)
    }

  # module.operator_service.module.frontend.aws_sqs_queue.change_handler_dead_letter_queue will be created
  + resource "aws_sqs_queue" "change_handler_dead_letter_queue" {
      + arn                               = (known after apply)
      + content_based_deduplication       = false
      + deduplication_scope               = (known after apply)
      + delay_seconds                     = 0
      + fifo_queue                        = false
      + fifo_throughput_limit             = (known after apply)
      + id                                = (known after apply)
      + kms_data_key_reuse_period_seconds = (known after apply)
      + max_message_size                  = 262144
      + message_retention_seconds         = 1209600
      + name                              = "aggregation-service-dev-env-ChangeHandlerDeadLetter"
      + name_prefix                       = (known after apply)
      + policy                            = (known after apply)
      + receive_wait_time_seconds         = 0
      + sqs_managed_sse_enabled           = true
      + tags                              = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-ChangeHandlerDeadLetter"
          + "role"        = "change-handler-dead-letter-queue"
          + "service"     = "operator-service"
        }
      + tags_all                          = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-ChangeHandlerDeadLetter"
          + "role"        = "change-handler-dead-letter-queue"
          + "service"     = "operator-service"
        }
      + url                               = (known after apply)
      + visibility_timeout_seconds        = 30
    }

  # module.operator_service.module.frontend_dashboard.aws_cloudwatch_dashboard.frontend-dashboard will be created
  + resource "aws_cloudwatch_dashboard" "frontend-dashboard" {
      + dashboard_arn  = (known after apply)
      + dashboard_body = (known after apply)
      + dashboard_name = "aggregation-service-dev-env-frontend-dashboard"
      + id             = (known after apply)
    }

  # module.operator_service.module.job_queue.aws_cloudwatch_metric_alarm.job_queue_old_message_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "job_queue_old_message_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "SQS messages that have not completed processing in 3600 seconds"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_job_queue_old_message_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "QueueName" = "aggregation-service-dev-env-JobQueue"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "ApproximateAgeOfOldestMessage"
      + namespace                             = "AWS/SQS"
      + period                                = 300
      + statistic                             = "Maximum"
      + tags_all                              = (known after apply)
      + threshold                             = 3600
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.job_queue.aws_sqs_queue.job_queue will be created
  + resource "aws_sqs_queue" "job_queue" {
      + arn                               = (known after apply)
      + content_based_deduplication       = false
      + deduplication_scope               = (known after apply)
      + delay_seconds                     = 0
      + fifo_queue                        = false
      + fifo_throughput_limit             = (known after apply)
      + id                                = (known after apply)
      + kms_data_key_reuse_period_seconds = (known after apply)
      + max_message_size                  = 262144
      + message_retention_seconds         = 1209600
      + name                              = "aggregation-service-dev-env-JobQueue"
      + name_prefix                       = (known after apply)
      + policy                            = (known after apply)
      + receive_wait_time_seconds         = 0
      + sqs_managed_sse_enabled           = true
      + tags                              = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-JobQueue"
          + "role"        = "job_queue"
          + "service"     = "operator-service"
        }
      + tags_all                          = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-JobQueue"
          + "role"        = "job_queue"
          + "service"     = "operator-service"
        }
      + url                               = (known after apply)
      + visibility_timeout_seconds        = 30
    }

  # module.operator_service.module.job_queue.aws_ssm_parameter.aws_job_queue_parameter_store will be created
  + resource "aws_ssm_parameter" "aws_job_queue_parameter_store" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-JOB_QUEUE"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-JOB_QUEUE"
          + "role"        = "job_queue"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-JOB_QUEUE"
          + "role"        = "job_queue"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.job_queue.aws_ssm_parameter.aws_sqs_queue_url_parameter_store_legacy will be created
  + resource "aws_ssm_parameter" "aws_sqs_queue_url_parameter_store_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/sqs_queue_url"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/sqs_queue_url"
          + "role"        = "job_queue"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/sqs_queue_url"
          + "role"        = "job_queue"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.kms_key_parameter.aws_ssm_parameter.worker_parameter will be created
  + resource "aws_ssm_parameter" "worker_parameter" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-COORDINATOR_KMS_ARN"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-COORDINATOR_KMS_ARN"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-COORDINATOR_KMS_ARN"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.kms_key_parameter.aws_ssm_parameter.worker_parameter_legacy will be created
  + resource "aws_ssm_parameter" "worker_parameter_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/kms_key_arn"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/kms_key_arn"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/kms_key_arn"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.max_job_num_attempts.aws_ssm_parameter.worker_parameter will be created
  + resource "aws_ssm_parameter" "worker_parameter" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-MAX_JOB_NUM_ATTEMPTS"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-MAX_JOB_NUM_ATTEMPTS"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-MAX_JOB_NUM_ATTEMPTS"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.max_job_num_attempts.aws_ssm_parameter.worker_parameter_legacy will be created
  + resource "aws_ssm_parameter" "worker_parameter_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/max_job_num_attempts"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/max_job_num_attempts"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/max_job_num_attempts"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.max_job_processing_time_parameter.aws_ssm_parameter.worker_parameter will be created
  + resource "aws_ssm_parameter" "worker_parameter" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-MAX_JOB_PROCESSING_TIME_SECONDS"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-MAX_JOB_PROCESSING_TIME_SECONDS"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-MAX_JOB_PROCESSING_TIME_SECONDS"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.max_job_processing_time_parameter.aws_ssm_parameter.worker_parameter_legacy will be created
  + resource "aws_ssm_parameter" "worker_parameter_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/max_job_processing_time_seconds"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/max_job_processing_time_seconds"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/max_job_processing_time_seconds"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.metadata_db.aws_cloudwatch_metric_alarm.metadatadb_table_read_capacity_usage_ratio_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "metadatadb_table_read_capacity_usage_ratio_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Operator MetadataDb table has consumed more than its read capacity units."
      + alarm_name                            = "aggregation-service-dev-env_operator_metdatadb_dynamodb_table_read_capacity_ratio_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanOrEqualToThreshold"
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + tags                                  = {
          + "environment" = "aggregation-service-dev-env"
        }
      + tags_all                              = {
          + "environment" = "aggregation-service-dev-env"
        }
      + threshold                             = 0.9
      + treat_missing_data                    = "notBreaching"

      + metric_query {
          + id          = "m1"
          + return_data = false

          + metric {
              + dimensions  = {
                  + "TableName" = "aggregation-service-dev-env-JobMetadata"
                }
              + metric_name = "ConsumedReadCapacityUnits"
              + namespace   = "AWS/DynamoDB"
              + period      = 60
              + stat        = "Sum"
            }
        }
      + metric_query {
          + expression  = "m1/(5*60)"
          + id          = "e1"
          + label       = "aggregation-service-dev-env MetadataDB Read Capacity Usage Ratio"
          + return_data = true
        }
    }

  # module.operator_service.module.metadata_db.aws_cloudwatch_metric_alarm.metadatadb_table_write_capacity_usage_ratio_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "metadatadb_table_write_capacity_usage_ratio_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Operator MetadataDb table has consumed more than its write capacity units."
      + alarm_name                            = "aggregation-service-dev-env_operator_metadatadb_dynamodb_table_write_capacity_ratio_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanOrEqualToThreshold"
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + tags                                  = {
          + "environment" = "aggregation-service-dev-env"
        }
      + tags_all                              = {
          + "environment" = "aggregation-service-dev-env"
        }
      + threshold                             = 0.9
      + treat_missing_data                    = "notBreaching"

      + metric_query {
          + id          = "m1"
          + return_data = false

          + metric {
              + dimensions  = {
                  + "TableName" = "aggregation-service-dev-env-JobMetadata"
                }
              + metric_name = "ConsumedWriteCapacityUnits"
              + namespace   = "AWS/DynamoDB"
              + period      = 60
              + stat        = "Sum"
            }
        }
      + metric_query {
          + expression  = "m1/(5*60)"
          + id          = "e1"
          + label       = "aggregation-service-dev-env MetadataDB Write Capacity Usage Ratio"
          + return_data = true
        }
    }

  # module.operator_service.module.metadata_db.aws_dynamodb_table.metadata_db_table will be created
  + resource "aws_dynamodb_table" "metadata_db_table" {
      + arn              = (known after apply)
      + billing_mode     = "PROVISIONED"
      + hash_key         = "JobKey"
      + id               = (known after apply)
      + name             = "aggregation-service-dev-env-JobMetadata"
      + read_capacity    = 5
      + stream_arn       = (known after apply)
      + stream_enabled   = true
      + stream_label     = (known after apply)
      + stream_view_type = "NEW_AND_OLD_IMAGES"
      + tags             = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-JobMetadata"
          + "role"        = "metadatadb"
          + "service"     = "operator-service"
        }
      + tags_all         = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-JobMetadata"
          + "role"        = "metadatadb"
          + "service"     = "operator-service"
        }
      + write_capacity   = 5

      + attribute {
          + name = "JobKey"
          + type = "S"
        }

      + point_in_time_recovery {
          + enabled = true
        }

      + server_side_encryption {
          + enabled     = (known after apply)
          + kms_key_arn = (known after apply)
        }

      + ttl {
          + attribute_name = "Ttl"
          + enabled        = true
        }
    }

  # module.operator_service.module.metadata_db.aws_ssm_parameter.job_metadata_db_parameter_store will be created
  + resource "aws_ssm_parameter" "job_metadata_db_parameter_store" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-JOB_METADATA_DB"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-JOB_METADATA_DB"
          + "role"        = "metadatadb"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-JOB_METADATA_DB"
          + "role"        = "metadatadb"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.metadata_db.aws_ssm_parameter.metadata_db_table_name_parameter_store_legacy will be created
  + resource "aws_ssm_parameter" "metadata_db_table_name_parameter_store_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/dynamodb_metadatadb_table_name"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/dynamodb_metadatadb_table_name"
          + "role"        = "metadatadb"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/dynamodb_metadatadb_table_name"
          + "role"        = "metadatadb"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.operator_alarm_sns_topic[0].aws_sns_topic.operator_alarm_sns_topic will be created
  + resource "aws_sns_topic" "operator_alarm_sns_topic" {
      + arn                         = (known after apply)
      + content_based_deduplication = false
      + fifo_topic                  = false
      + id                          = (known after apply)
      + name                        = "aggregation-service-dev-env_us-west-2_operator_alarms_sns_topic"
      + name_prefix                 = (known after apply)
      + owner                       = (known after apply)
      + policy                      = (known after apply)
      + tags_all                    = (known after apply)
    }

  # module.operator_service.module.operator_alarm_sns_topic[0].aws_sns_topic_subscription.operator_alarm_sns_topic_subscription will be created
  + resource "aws_sns_topic_subscription" "operator_alarm_sns_topic_subscription" {
      + arn                             = (known after apply)
      + confirmation_timeout_in_minutes = 1
      + confirmation_was_authenticated  = (known after apply)
      + endpoint                        = "data-pipelines@nextroll.com"
      + endpoint_auto_confirms          = false
      + id                              = (known after apply)
      + owner_id                        = (known after apply)
      + pending_confirmation            = (known after apply)
      + protocol                        = "email"
      + raw_message_delivery            = false
      + topic_arn                       = (known after apply)
    }

  # module.operator_service.module.vpc[0].data.aws_iam_policy_document.dynamodb_vpce_policy will be read during apply
  # (config refers to values not yet known)
 <= data "aws_iam_policy_document" "dynamodb_vpce_policy" {
      + id   = (known after apply)
      + json = (known after apply)

      + statement {
          + actions   = [
              + "dynamodb:*",
            ]
          + effect    = "Allow"
          + resources = [
              + (known after apply),
              + (known after apply),
            ]
          + sid       = "AccessToDynamoDb"

          + condition {
              + test     = "StringLike"
              + values   = [
                  + (known after apply),
                ]
              + variable = "aws:PrincipalArn"
            }

          + principals {
              + identifiers = [
                  + "*",
                ]
              + type        = "AWS"
            }
        }
    }

  # module.operator_service.module.vpc[0].data.aws_iam_policy_document.s3_vpce_policy will be read during apply
  # (config refers to values not yet known)
 <= data "aws_iam_policy_document" "s3_vpce_policy" {
      + id   = (known after apply)
      + json = (known after apply)

      + statement {
          + actions   = [
              + "s3:*",
            ]
          + effect    = "Allow"
          + resources = [
              + "*",
            ]
          + sid       = "AccessToS3"

          + condition {
              + test     = "StringLike"
              + values   = [
                  + (known after apply),
                ]
              + variable = "aws:PrincipalArn"
            }

          + principals {
              + identifiers = [
                  + "*",
                ]
              + type        = "AWS"
            }
        }
    }

  # module.operator_service.module.vpc[0].aws_eip.elastic_ip["us-west-2a"] will be created
  + resource "aws_eip" "elastic_ip" {
      + allocation_id        = (known after apply)
      + association_id       = (known after apply)
      + carrier_ip           = (known after apply)
      + customer_owned_ip    = (known after apply)
      + domain               = (known after apply)
      + id                   = (known after apply)
      + instance             = (known after apply)
      + network_border_group = (known after apply)
      + network_interface    = (known after apply)
      + private_dns          = (known after apply)
      + private_ip           = (known after apply)
      + public_dns           = (known after apply)
      + public_ip            = (known after apply)
      + public_ipv4_pool     = (known after apply)
      + tags_all             = (known after apply)
      + vpc                  = true
    }

  # module.operator_service.module.vpc[0].aws_eip.elastic_ip["us-west-2b"] will be created
  + resource "aws_eip" "elastic_ip" {
      + allocation_id        = (known after apply)
      + association_id       = (known after apply)
      + carrier_ip           = (known after apply)
      + customer_owned_ip    = (known after apply)
      + domain               = (known after apply)
      + id                   = (known after apply)
      + instance             = (known after apply)
      + network_border_group = (known after apply)
      + network_interface    = (known after apply)
      + private_dns          = (known after apply)
      + private_ip           = (known after apply)
      + public_dns           = (known after apply)
      + public_ip            = (known after apply)
      + public_ipv4_pool     = (known after apply)
      + tags_all             = (known after apply)
      + vpc                  = true
    }

  # module.operator_service.module.vpc[0].aws_eip.elastic_ip["us-west-2c"] will be created
  + resource "aws_eip" "elastic_ip" {
      + allocation_id        = (known after apply)
      + association_id       = (known after apply)
      + carrier_ip           = (known after apply)
      + customer_owned_ip    = (known after apply)
      + domain               = (known after apply)
      + id                   = (known after apply)
      + instance             = (known after apply)
      + network_border_group = (known after apply)
      + network_interface    = (known after apply)
      + private_dns          = (known after apply)
      + private_ip           = (known after apply)
      + public_dns           = (known after apply)
      + public_ip            = (known after apply)
      + public_ipv4_pool     = (known after apply)
      + tags_all             = (known after apply)
      + vpc                  = true
    }

  # module.operator_service.module.vpc[0].aws_eip.elastic_ip["us-west-2d"] will be created
  + resource "aws_eip" "elastic_ip" {
      + allocation_id        = (known after apply)
      + association_id       = (known after apply)
      + carrier_ip           = (known after apply)
      + customer_owned_ip    = (known after apply)
      + domain               = (known after apply)
      + id                   = (known after apply)
      + instance             = (known after apply)
      + network_border_group = (known after apply)
      + network_interface    = (known after apply)
      + private_dns          = (known after apply)
      + private_ip           = (known after apply)
      + public_dns           = (known after apply)
      + public_ip            = (known after apply)
      + public_ipv4_pool     = (known after apply)
      + tags_all             = (known after apply)
      + vpc                  = true
    }

  # module.operator_service.module.vpc[0].aws_internet_gateway.inet_gateway will be created
  + resource "aws_internet_gateway" "inet_gateway" {
      + arn      = (known after apply)
      + id       = (known after apply)
      + owner_id = (known after apply)
      + tags     = {
          + "Name" = "operator-service-aggregation-service-dev-env"
        }
      + tags_all = {
          + "Name" = "operator-service-aggregation-service-dev-env"
        }
      + vpc_id   = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_nat_gateway.nat_gateway["us-west-2a"] will be created
  + resource "aws_nat_gateway" "nat_gateway" {
      + allocation_id        = (known after apply)
      + connectivity_type    = "public"
      + id                   = (known after apply)
      + network_interface_id = (known after apply)
      + private_ip           = (known after apply)
      + public_ip            = (known after apply)
      + subnet_id            = (known after apply)
      + tags                 = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2a"
          + "subnet_type"       = "public"
        }
      + tags_all             = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2a"
          + "subnet_type"       = "public"
        }
    }

  # module.operator_service.module.vpc[0].aws_nat_gateway.nat_gateway["us-west-2b"] will be created
  + resource "aws_nat_gateway" "nat_gateway" {
      + allocation_id        = (known after apply)
      + connectivity_type    = "public"
      + id                   = (known after apply)
      + network_interface_id = (known after apply)
      + private_ip           = (known after apply)
      + public_ip            = (known after apply)
      + subnet_id            = (known after apply)
      + tags                 = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2b"
          + "subnet_type"       = "public"
        }
      + tags_all             = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2b"
          + "subnet_type"       = "public"
        }
    }

  # module.operator_service.module.vpc[0].aws_nat_gateway.nat_gateway["us-west-2c"] will be created
  + resource "aws_nat_gateway" "nat_gateway" {
      + allocation_id        = (known after apply)
      + connectivity_type    = "public"
      + id                   = (known after apply)
      + network_interface_id = (known after apply)
      + private_ip           = (known after apply)
      + public_ip            = (known after apply)
      + subnet_id            = (known after apply)
      + tags                 = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2c"
          + "subnet_type"       = "public"
        }
      + tags_all             = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2c"
          + "subnet_type"       = "public"
        }
    }

  # module.operator_service.module.vpc[0].aws_nat_gateway.nat_gateway["us-west-2d"] will be created
  + resource "aws_nat_gateway" "nat_gateway" {
      + allocation_id        = (known after apply)
      + connectivity_type    = "public"
      + id                   = (known after apply)
      + network_interface_id = (known after apply)
      + private_ip           = (known after apply)
      + public_ip            = (known after apply)
      + subnet_id            = (known after apply)
      + tags                 = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2d"
          + "subnet_type"       = "public"
        }
      + tags_all             = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2d"
          + "subnet_type"       = "public"
        }
    }

  # module.operator_service.module.vpc[0].aws_route.inet_gateway_route will be created
  + resource "aws_route" "inet_gateway_route" {
      + destination_cidr_block = "0.0.0.0/0"
      + gateway_id             = (known after apply)
      + id                     = (known after apply)
      + instance_id            = (known after apply)
      + instance_owner_id      = (known after apply)
      + network_interface_id   = (known after apply)
      + origin                 = (known after apply)
      + route_table_id         = (known after apply)
      + state                  = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_route.nat_gateway_route["us-west-2a"] will be created
  + resource "aws_route" "nat_gateway_route" {
      + destination_cidr_block = "0.0.0.0/0"
      + id                     = (known after apply)
      + instance_id            = (known after apply)
      + instance_owner_id      = (known after apply)
      + nat_gateway_id         = (known after apply)
      + network_interface_id   = (known after apply)
      + origin                 = (known after apply)
      + route_table_id         = (known after apply)
      + state                  = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_route.nat_gateway_route["us-west-2b"] will be created
  + resource "aws_route" "nat_gateway_route" {
      + destination_cidr_block = "0.0.0.0/0"
      + id                     = (known after apply)
      + instance_id            = (known after apply)
      + instance_owner_id      = (known after apply)
      + nat_gateway_id         = (known after apply)
      + network_interface_id   = (known after apply)
      + origin                 = (known after apply)
      + route_table_id         = (known after apply)
      + state                  = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_route.nat_gateway_route["us-west-2c"] will be created
  + resource "aws_route" "nat_gateway_route" {
      + destination_cidr_block = "0.0.0.0/0"
      + id                     = (known after apply)
      + instance_id            = (known after apply)
      + instance_owner_id      = (known after apply)
      + nat_gateway_id         = (known after apply)
      + network_interface_id   = (known after apply)
      + origin                 = (known after apply)
      + route_table_id         = (known after apply)
      + state                  = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_route.nat_gateway_route["us-west-2d"] will be created
  + resource "aws_route" "nat_gateway_route" {
      + destination_cidr_block = "0.0.0.0/0"
      + id                     = (known after apply)
      + instance_id            = (known after apply)
      + instance_owner_id      = (known after apply)
      + nat_gateway_id         = (known after apply)
      + network_interface_id   = (known after apply)
      + origin                 = (known after apply)
      + route_table_id         = (known after apply)
      + state                  = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_route_table.private_route_table["us-west-2a"] will be created
  + resource "aws_route_table" "private_route_table" {
      + arn              = (known after apply)
      + id               = (known after apply)
      + owner_id         = (known after apply)
      + propagating_vgws = (known after apply)
      + route            = (known after apply)
      + tags             = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2a"
          + "subnet_type"       = "private"
        }
      + tags_all         = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2a"
          + "subnet_type"       = "private"
        }
      + vpc_id           = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_route_table.private_route_table["us-west-2b"] will be created
  + resource "aws_route_table" "private_route_table" {
      + arn              = (known after apply)
      + id               = (known after apply)
      + owner_id         = (known after apply)
      + propagating_vgws = (known after apply)
      + route            = (known after apply)
      + tags             = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2b"
          + "subnet_type"       = "private"
        }
      + tags_all         = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2b"
          + "subnet_type"       = "private"
        }
      + vpc_id           = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_route_table.private_route_table["us-west-2c"] will be created
  + resource "aws_route_table" "private_route_table" {
      + arn              = (known after apply)
      + id               = (known after apply)
      + owner_id         = (known after apply)
      + propagating_vgws = (known after apply)
      + route            = (known after apply)
      + tags             = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2c"
          + "subnet_type"       = "private"
        }
      + tags_all         = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2c"
          + "subnet_type"       = "private"
        }
      + vpc_id           = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_route_table.private_route_table["us-west-2d"] will be created
  + resource "aws_route_table" "private_route_table" {
      + arn              = (known after apply)
      + id               = (known after apply)
      + owner_id         = (known after apply)
      + propagating_vgws = (known after apply)
      + route            = (known after apply)
      + tags             = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2d"
          + "subnet_type"       = "private"
        }
      + tags_all         = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2d"
          + "subnet_type"       = "private"
        }
      + vpc_id           = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_route_table_association.private_route_assoc["us-west-2a"] will be created
  + resource "aws_route_table_association" "private_route_assoc" {
      + id             = (known after apply)
      + route_table_id = (known after apply)
      + subnet_id      = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_route_table_association.private_route_assoc["us-west-2b"] will be created
  + resource "aws_route_table_association" "private_route_assoc" {
      + id             = (known after apply)
      + route_table_id = (known after apply)
      + subnet_id      = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_route_table_association.private_route_assoc["us-west-2c"] will be created
  + resource "aws_route_table_association" "private_route_assoc" {
      + id             = (known after apply)
      + route_table_id = (known after apply)
      + subnet_id      = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_route_table_association.private_route_assoc["us-west-2d"] will be created
  + resource "aws_route_table_association" "private_route_assoc" {
      + id             = (known after apply)
      + route_table_id = (known after apply)
      + subnet_id      = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_security_group.default will be created
  + resource "aws_security_group" "default" {
      + arn                    = (known after apply)
      + description            = (known after apply)
      + egress                 = (known after apply)
      + id                     = (known after apply)
      + ingress                = (known after apply)
      + name                   = (known after apply)
      + name_prefix            = (known after apply)
      + owner_id               = (known after apply)
      + revoke_rules_on_delete = false
      + tags                   = {
          + "Name" = "operator-service-aggregation-service-dev-env"
        }
      + tags_all               = {
          + "Name" = "operator-service-aggregation-service-dev-env"
        }
      + vpc_id                 = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_security_group.egress will be created
  + resource "aws_security_group" "egress" {
      + arn                    = (known after apply)
      + description            = (known after apply)
      + egress                 = (known after apply)
      + id                     = (known after apply)
      + ingress                = (known after apply)
      + name                   = "allow_egress"
      + name_prefix            = (known after apply)
      + owner_id               = (known after apply)
      + revoke_rules_on_delete = false
      + tags                   = {
          + "Name" = "operator-service-aggregation-service-dev-env"
        }
      + tags_all               = {
          + "Name" = "operator-service-aggregation-service-dev-env"
        }
      + vpc_id                 = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_security_group.internal will be created
  + resource "aws_security_group" "internal" {
      + arn                    = (known after apply)
      + description            = (known after apply)
      + egress                 = (known after apply)
      + id                     = (known after apply)
      + ingress                = (known after apply)
      + name                   = "allow_internal"
      + name_prefix            = (known after apply)
      + owner_id               = (known after apply)
      + revoke_rules_on_delete = false
      + tags                   = {
          + "Name" = "operator-service-aggregation-service-dev-env"
        }
      + tags_all               = {
          + "Name" = "operator-service-aggregation-service-dev-env"
        }
      + vpc_id                 = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_security_group_rule.allow_all_from_internal will be created
  + resource "aws_security_group_rule" "allow_all_from_internal" {
      + cidr_blocks              = [
          + "10.0.0.0/16",
        ]
      + from_port                = 0
      + id                       = (known after apply)
      + protocol                 = "-1"
      + security_group_id        = (known after apply)
      + self                     = false
      + source_security_group_id = (known after apply)
      + to_port                  = 0
      + type                     = "ingress"
    }

  # module.operator_service.module.vpc[0].aws_security_group_rule.allow_egress_dns will be created
  + resource "aws_security_group_rule" "allow_egress_dns" {
      + cidr_blocks              = [
          + "0.0.0.0/0",
        ]
      + description              = "dns via tcp access"
      + from_port                = 53
      + id                       = (known after apply)
      + protocol                 = "tcp"
      + security_group_id        = (known after apply)
      + self                     = false
      + source_security_group_id = (known after apply)
      + to_port                  = 53
      + type                     = "egress"
    }

  # module.operator_service.module.vpc[0].aws_security_group_rule.allow_egress_dns_udp will be created
  + resource "aws_security_group_rule" "allow_egress_dns_udp" {
      + cidr_blocks              = [
          + "0.0.0.0/0",
        ]
      + description              = "dns via udp access"
      + from_port                = 53
      + id                       = (known after apply)
      + protocol                 = "udp"
      + security_group_id        = (known after apply)
      + self                     = false
      + source_security_group_id = (known after apply)
      + to_port                  = 53
      + type                     = "egress"
    }

  # module.operator_service.module.vpc[0].aws_security_group_rule.allow_egress_http will be created
  + resource "aws_security_group_rule" "allow_egress_http" {
      + cidr_blocks              = [
          + "0.0.0.0/0",
        ]
      + description              = "http access"
      + from_port                = 80
      + id                       = (known after apply)
      + protocol                 = "tcp"
      + security_group_id        = (known after apply)
      + self                     = false
      + source_security_group_id = (known after apply)
      + to_port                  = 80
      + type                     = "egress"
    }

  # module.operator_service.module.vpc[0].aws_security_group_rule.allow_egress_https will be created
  + resource "aws_security_group_rule" "allow_egress_https" {
      + cidr_blocks              = [
          + "0.0.0.0/0",
        ]
      + description              = "https access"
      + from_port                = 443
      + id                       = (known after apply)
      + protocol                 = "tcp"
      + security_group_id        = (known after apply)
      + self                     = false
      + source_security_group_id = (known after apply)
      + to_port                  = 443
      + type                     = "egress"
    }

  # module.operator_service.module.vpc[0].aws_security_group_rule.allow_ingress_https will be created
  + resource "aws_security_group_rule" "allow_ingress_https" {
      + cidr_blocks              = [
          + "10.0.0.0/16",
        ]
      + description              = "https access from VPC"
      + from_port                = 443
      + id                       = (known after apply)
      + protocol                 = "tcp"
      + security_group_id        = (known after apply)
      + self                     = false
      + source_security_group_id = (known after apply)
      + to_port                  = 443
      + type                     = "ingress"
    }

  # module.operator_service.module.vpc[0].aws_subnet.private["us-west-2a"] will be created
  + resource "aws_subnet" "private" {
      + arn                                            = (known after apply)
      + assign_ipv6_address_on_creation                = false
      + availability_zone                              = "us-west-2a"
      + availability_zone_id                           = (known after apply)
      + cidr_block                                     = "10.0.0.0/20"
      + enable_dns64                                   = false
      + enable_resource_name_dns_a_record_on_launch    = false
      + enable_resource_name_dns_aaaa_record_on_launch = false
      + id                                             = (known after apply)
      + ipv6_cidr_block_association_id                 = (known after apply)
      + ipv6_native                                    = false
      + map_public_ip_on_launch                        = false
      + owner_id                                       = (known after apply)
      + private_dns_hostname_type_on_launch            = (known after apply)
      + tags                                           = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2a"
          + "subnet_type"       = "private"
        }
      + tags_all                                       = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2a"
          + "subnet_type"       = "private"
        }
      + vpc_id                                         = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_subnet.private["us-west-2b"] will be created
  + resource "aws_subnet" "private" {
      + arn                                            = (known after apply)
      + assign_ipv6_address_on_creation                = false
      + availability_zone                              = "us-west-2b"
      + availability_zone_id                           = (known after apply)
      + cidr_block                                     = "10.0.32.0/20"
      + enable_dns64                                   = false
      + enable_resource_name_dns_a_record_on_launch    = false
      + enable_resource_name_dns_aaaa_record_on_launch = false
      + id                                             = (known after apply)
      + ipv6_cidr_block_association_id                 = (known after apply)
      + ipv6_native                                    = false
      + map_public_ip_on_launch                        = false
      + owner_id                                       = (known after apply)
      + private_dns_hostname_type_on_launch            = (known after apply)
      + tags                                           = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2b"
          + "subnet_type"       = "private"
        }
      + tags_all                                       = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2b"
          + "subnet_type"       = "private"
        }
      + vpc_id                                         = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_subnet.private["us-west-2c"] will be created
  + resource "aws_subnet" "private" {
      + arn                                            = (known after apply)
      + assign_ipv6_address_on_creation                = false
      + availability_zone                              = "us-west-2c"
      + availability_zone_id                           = (known after apply)
      + cidr_block                                     = "10.0.64.0/20"
      + enable_dns64                                   = false
      + enable_resource_name_dns_a_record_on_launch    = false
      + enable_resource_name_dns_aaaa_record_on_launch = false
      + id                                             = (known after apply)
      + ipv6_cidr_block_association_id                 = (known after apply)
      + ipv6_native                                    = false
      + map_public_ip_on_launch                        = false
      + owner_id                                       = (known after apply)
      + private_dns_hostname_type_on_launch            = (known after apply)
      + tags                                           = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2c"
          + "subnet_type"       = "private"
        }
      + tags_all                                       = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2c"
          + "subnet_type"       = "private"
        }
      + vpc_id                                         = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_subnet.private["us-west-2d"] will be created
  + resource "aws_subnet" "private" {
      + arn                                            = (known after apply)
      + assign_ipv6_address_on_creation                = false
      + availability_zone                              = "us-west-2d"
      + availability_zone_id                           = (known after apply)
      + cidr_block                                     = "10.0.96.0/20"
      + enable_dns64                                   = false
      + enable_resource_name_dns_a_record_on_launch    = false
      + enable_resource_name_dns_aaaa_record_on_launch = false
      + id                                             = (known after apply)
      + ipv6_cidr_block_association_id                 = (known after apply)
      + ipv6_native                                    = false
      + map_public_ip_on_launch                        = false
      + owner_id                                       = (known after apply)
      + private_dns_hostname_type_on_launch            = (known after apply)
      + tags                                           = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2d"
          + "subnet_type"       = "private"
        }
      + tags_all                                       = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2d"
          + "subnet_type"       = "private"
        }
      + vpc_id                                         = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_subnet.public["us-west-2a"] will be created
  + resource "aws_subnet" "public" {
      + arn                                            = (known after apply)
      + assign_ipv6_address_on_creation                = false
      + availability_zone                              = "us-west-2a"
      + availability_zone_id                           = (known after apply)
      + cidr_block                                     = "10.0.16.0/21"
      + enable_dns64                                   = false
      + enable_resource_name_dns_a_record_on_launch    = false
      + enable_resource_name_dns_aaaa_record_on_launch = false
      + id                                             = (known after apply)
      + ipv6_cidr_block_association_id                 = (known after apply)
      + ipv6_native                                    = false
      + map_public_ip_on_launch                        = false
      + owner_id                                       = (known after apply)
      + private_dns_hostname_type_on_launch            = (known after apply)
      + tags                                           = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2a"
          + "subnet_type"       = "public"
        }
      + tags_all                                       = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2a"
          + "subnet_type"       = "public"
        }
      + vpc_id                                         = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_subnet.public["us-west-2b"] will be created
  + resource "aws_subnet" "public" {
      + arn                                            = (known after apply)
      + assign_ipv6_address_on_creation                = false
      + availability_zone                              = "us-west-2b"
      + availability_zone_id                           = (known after apply)
      + cidr_block                                     = "10.0.48.0/21"
      + enable_dns64                                   = false
      + enable_resource_name_dns_a_record_on_launch    = false
      + enable_resource_name_dns_aaaa_record_on_launch = false
      + id                                             = (known after apply)
      + ipv6_cidr_block_association_id                 = (known after apply)
      + ipv6_native                                    = false
      + map_public_ip_on_launch                        = false
      + owner_id                                       = (known after apply)
      + private_dns_hostname_type_on_launch            = (known after apply)
      + tags                                           = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2b"
          + "subnet_type"       = "public"
        }
      + tags_all                                       = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2b"
          + "subnet_type"       = "public"
        }
      + vpc_id                                         = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_subnet.public["us-west-2c"] will be created
  + resource "aws_subnet" "public" {
      + arn                                            = (known after apply)
      + assign_ipv6_address_on_creation                = false
      + availability_zone                              = "us-west-2c"
      + availability_zone_id                           = (known after apply)
      + cidr_block                                     = "10.0.80.0/21"
      + enable_dns64                                   = false
      + enable_resource_name_dns_a_record_on_launch    = false
      + enable_resource_name_dns_aaaa_record_on_launch = false
      + id                                             = (known after apply)
      + ipv6_cidr_block_association_id                 = (known after apply)
      + ipv6_native                                    = false
      + map_public_ip_on_launch                        = false
      + owner_id                                       = (known after apply)
      + private_dns_hostname_type_on_launch            = (known after apply)
      + tags                                           = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2c"
          + "subnet_type"       = "public"
        }
      + tags_all                                       = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2c"
          + "subnet_type"       = "public"
        }
      + vpc_id                                         = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_subnet.public["us-west-2d"] will be created
  + resource "aws_subnet" "public" {
      + arn                                            = (known after apply)
      + assign_ipv6_address_on_creation                = false
      + availability_zone                              = "us-west-2d"
      + availability_zone_id                           = (known after apply)
      + cidr_block                                     = "10.0.112.0/21"
      + enable_dns64                                   = false
      + enable_resource_name_dns_a_record_on_launch    = false
      + enable_resource_name_dns_aaaa_record_on_launch = false
      + id                                             = (known after apply)
      + ipv6_cidr_block_association_id                 = (known after apply)
      + ipv6_native                                    = false
      + map_public_ip_on_launch                        = false
      + owner_id                                       = (known after apply)
      + private_dns_hostname_type_on_launch            = (known after apply)
      + tags                                           = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2d"
          + "subnet_type"       = "public"
        }
      + tags_all                                       = {
          + "Name"              = "operator-service-aggregation-service-dev-env"
          + "availability_zone" = "us-west-2d"
          + "subnet_type"       = "public"
        }
      + vpc_id                                         = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_vpc.main will be created
  + resource "aws_vpc" "main" {
      + arn                                  = (known after apply)
      + cidr_block                           = "10.0.0.0/16"
      + default_network_acl_id               = (known after apply)
      + default_route_table_id               = (known after apply)
      + default_security_group_id            = (known after apply)
      + dhcp_options_id                      = (known after apply)
      + enable_classiclink                   = (known after apply)
      + enable_classiclink_dns_support       = (known after apply)
      + enable_dns_hostnames                 = true
      + enable_dns_support                   = true
      + id                                   = (known after apply)
      + instance_tenancy                     = "default"
      + ipv6_association_id                  = (known after apply)
      + ipv6_cidr_block                      = (known after apply)
      + ipv6_cidr_block_network_border_group = (known after apply)
      + main_route_table_id                  = (known after apply)
      + owner_id                             = (known after apply)
      + tags                                 = {
          + "Name" = "operator-service-aggregation-service-dev-env"
        }
      + tags_all                             = {
          + "Name" = "operator-service-aggregation-service-dev-env"
        }
    }

  # module.operator_service.module.vpc[0].aws_vpc_endpoint.dynamodb_endpoint will be created
  + resource "aws_vpc_endpoint" "dynamodb_endpoint" {
      + arn                   = (known after apply)
      + cidr_blocks           = (known after apply)
      + dns_entry             = (known after apply)
      + id                    = (known after apply)
      + network_interface_ids = (known after apply)
      + owner_id              = (known after apply)
      + policy                = (known after apply)
      + prefix_list_id        = (known after apply)
      + private_dns_enabled   = false
      + requester_managed     = (known after apply)
      + route_table_ids       = (known after apply)
      + security_group_ids    = (known after apply)
      + service_name          = "com.amazonaws.us-west-2.dynamodb"
      + state                 = (known after apply)
      + subnet_ids            = (known after apply)
      + tags                  = {
          + "Name"        = "operator-service-aggregation-service-dev-env"
          + "environment" = "aggregation-service-dev-env"
          + "subnet_type" = "private"
        }
      + tags_all              = {
          + "Name"        = "operator-service-aggregation-service-dev-env"
          + "environment" = "aggregation-service-dev-env"
          + "subnet_type" = "private"
        }
      + vpc_endpoint_type     = "Gateway"
      + vpc_id                = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_vpc_endpoint.s3_endpoint will be created
  + resource "aws_vpc_endpoint" "s3_endpoint" {
      + arn                   = (known after apply)
      + cidr_blocks           = (known after apply)
      + dns_entry             = (known after apply)
      + id                    = (known after apply)
      + network_interface_ids = (known after apply)
      + owner_id              = (known after apply)
      + policy                = (known after apply)
      + prefix_list_id        = (known after apply)
      + private_dns_enabled   = false
      + requester_managed     = (known after apply)
      + route_table_ids       = (known after apply)
      + security_group_ids    = (known after apply)
      + service_name          = "com.amazonaws.us-west-2.s3"
      + state                 = (known after apply)
      + subnet_ids            = (known after apply)
      + tags                  = {
          + "Name"        = "operator-service-aggregation-service-dev-env"
          + "environment" = "aggregation-service-dev-env"
          + "subnet_type" = "private"
        }
      + tags_all              = {
          + "Name"        = "operator-service-aggregation-service-dev-env"
          + "environment" = "aggregation-service-dev-env"
          + "subnet_type" = "private"
        }
      + vpc_endpoint_type     = "Gateway"
      + vpc_id                = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_vpc_endpoint_route_table_association.private_to_keydb_route["us-west-2a"] will be created
  + resource "aws_vpc_endpoint_route_table_association" "private_to_keydb_route" {
      + id              = (known after apply)
      + route_table_id  = (known after apply)
      + vpc_endpoint_id = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_vpc_endpoint_route_table_association.private_to_keydb_route["us-west-2b"] will be created
  + resource "aws_vpc_endpoint_route_table_association" "private_to_keydb_route" {
      + id              = (known after apply)
      + route_table_id  = (known after apply)
      + vpc_endpoint_id = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_vpc_endpoint_route_table_association.private_to_keydb_route["us-west-2c"] will be created
  + resource "aws_vpc_endpoint_route_table_association" "private_to_keydb_route" {
      + id              = (known after apply)
      + route_table_id  = (known after apply)
      + vpc_endpoint_id = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_vpc_endpoint_route_table_association.private_to_keydb_route["us-west-2d"] will be created
  + resource "aws_vpc_endpoint_route_table_association" "private_to_keydb_route" {
      + id              = (known after apply)
      + route_table_id  = (known after apply)
      + vpc_endpoint_id = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_vpc_endpoint_route_table_association.private_to_s3_route["us-west-2a"] will be created
  + resource "aws_vpc_endpoint_route_table_association" "private_to_s3_route" {
      + id              = (known after apply)
      + route_table_id  = (known after apply)
      + vpc_endpoint_id = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_vpc_endpoint_route_table_association.private_to_s3_route["us-west-2b"] will be created
  + resource "aws_vpc_endpoint_route_table_association" "private_to_s3_route" {
      + id              = (known after apply)
      + route_table_id  = (known after apply)
      + vpc_endpoint_id = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_vpc_endpoint_route_table_association.private_to_s3_route["us-west-2c"] will be created
  + resource "aws_vpc_endpoint_route_table_association" "private_to_s3_route" {
      + id              = (known after apply)
      + route_table_id  = (known after apply)
      + vpc_endpoint_id = (known after apply)
    }

  # module.operator_service.module.vpc[0].aws_vpc_endpoint_route_table_association.private_to_s3_route["us-west-2d"] will be created
  + resource "aws_vpc_endpoint_route_table_association" "private_to_s3_route" {
      + id              = (known after apply)
      + route_table_id  = (known after apply)
      + vpc_endpoint_id = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.aws_autoscaling_group.worker_group will be created
  + resource "aws_autoscaling_group" "worker_group" {
      + arn                       = (known after apply)
      + availability_zones        = (known after apply)
      + default_cooldown          = (known after apply)
      + desired_capacity          = (known after apply)
      + enabled_metrics           = [
          + "GroupDesiredCapacity",
          + "GroupInServiceInstances",
          + "GroupPendingInstances",
          + "GroupTerminatingInstances",
          + "GroupTotalInstances",
        ]
      + force_delete              = false
      + force_delete_warm_pool    = false
      + health_check_grace_period = 300
      + health_check_type         = (known after apply)
      + id                        = (known after apply)
      + max_size                  = 20
      + metrics_granularity       = "1Minute"
      + min_size                  = 1
      + name                      = "aggregation-service-dev-env-aggregation-service-workers"
      + name_prefix               = (known after apply)
      + protect_from_scale_in     = false
      + service_linked_role_arn   = (known after apply)
      + vpc_zone_identifier       = (known after apply)
      + wait_for_capacity_timeout = "10m"

      + instance_refresh {
          + strategy = "Rolling"

          + preferences {
              + instance_warmup        = "60"
              + min_healthy_percentage = 80
            }
        }

      + launch_template {
          + id      = (known after apply)
          + name    = (known after apply)
          + version = (known after apply)
        }
    }

  # module.operator_service.module.worker_autoscaling.aws_autoscaling_lifecycle_hook.worker_scale_in_hook will be created
  + resource "aws_autoscaling_lifecycle_hook" "worker_scale_in_hook" {
      + autoscaling_group_name = "aggregation-service-dev-env-aggregation-service-workers"
      + default_result         = "CONTINUE"
      + heartbeat_timeout      = 3600
      + id                     = (known after apply)
      + lifecycle_transition   = "autoscaling:EC2_INSTANCE_TERMINATING"
      + name                   = "worker-scale-in-hook-aggregation-service-dev-env"
    }

  # module.operator_service.module.worker_autoscaling.aws_cloudwatch_event_rule.asg_capacity_cron will be created
  + resource "aws_cloudwatch_event_rule" "asg_capacity_cron" {
      + arn                 = (known after apply)
      + description         = "Cron to run the ASG capacity lambda"
      + event_bus_name      = "default"
      + id                  = (known after apply)
      + is_enabled          = true
      + name                = "aggregation-service-dev-env-asg-capacity-cron"
      + name_prefix         = (known after apply)
      + schedule_expression = "rate(1 minute)"
      + tags_all            = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.aws_cloudwatch_event_rule.terminated_instance_event_rule will be created
  + resource "aws_cloudwatch_event_rule" "terminated_instance_event_rule" {
      + arn            = (known after apply)
      + description    = "Event rule to trigger on worker instance termination"
      + event_bus_name = "default"
      + event_pattern  = jsonencode(
            {
              + detail      = {
                  + AutoScalingGroupName = [
                      + "aggregation-service-dev-env-aggregation-service-workers",
                    ]
                  + LifecycleHookName    = [
                      + "worker-scale-in-hook-aggregation-service-dev-env",
                    ]
                }
              + detail-type = [
                  + "EC2 Instance-terminate Lifecycle Action",
                ]
              + source      = [
                  + "aws.autoscaling",
                ]
            }
        )
      + id             = (known after apply)
      + is_enabled     = true
      + name           = "aggregation-service-dev-env-terminated_instance_rule"
      + name_prefix    = (known after apply)
      + tags_all       = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.aws_cloudwatch_event_target.asg_capacity_cron_target will be created
  + resource "aws_cloudwatch_event_target" "asg_capacity_cron_target" {
      + arn            = (known after apply)
      + event_bus_name = "default"
      + id             = (known after apply)
      + rule           = "aggregation-service-dev-env-asg-capacity-cron"
      + target_id      = "asg-capacity-target"
    }

  # module.operator_service.module.worker_autoscaling.aws_cloudwatch_event_target.terminated_instance_event_target will be created
  + resource "aws_cloudwatch_event_target" "terminated_instance_event_target" {
      + arn            = (known after apply)
      + event_bus_name = "default"
      + id             = (known after apply)
      + rule           = "aggregation-service-dev-env-terminated_instance_rule"
      + target_id      = "terminated-instance-target"
    }

  # module.operator_service.module.worker_autoscaling.aws_cloudwatch_metric_alarm.asg_capacity_lambda_error_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "asg_capacity_lambda_error_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Lambda errors over threshold of 0"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_asg_capacity_lambda_error_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "FunctionName" = "aggregation-service-dev-env-AsgCapacityHandler"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "Errors"
      + namespace                             = "AWS/Lambda"
      + period                                = 300
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_autoscaling.aws_cloudwatch_metric_alarm.asg_capacity_lambda_max_duration_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "asg_capacity_lambda_max_duration_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Lambda duration over the duration threshold of 15000ms"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_asg_capacity_lambda_duration_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "FunctionName" = "aggregation-service-dev-env-AsgCapacityHandler"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "Duration"
      + namespace                             = "AWS/Lambda"
      + period                                = 300
      + statistic                             = "Maximum"
      + tags_all                              = (known after apply)
      + threshold                             = 15000
      + treat_missing_data                    = "breaching"
    }

  # module.operator_service.module.worker_autoscaling.aws_cloudwatch_metric_alarm.asg_max_instances_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "asg_max_instances_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_asg_max_instance_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "AutoScalingGroupName" = "aggregation-service-dev-env-aggregation-service-workers"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "GroupDesiredCapacity"
      + namespace                             = "AWS/AutoScaling"
      + period                                = 60
      + statistic                             = "Maximum"
      + tags_all                              = (known after apply)
      + threshold                             = 18
      + treat_missing_data                    = "missing"
    }

  # module.operator_service.module.worker_autoscaling.aws_cloudwatch_metric_alarm.terminated_instance_lambda_error_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "terminated_instance_lambda_error_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Lambda errors over threshold of 0"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_terminated_instance_lambda_error_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "FunctionName" = "aggregation-service-dev-env-TerminatedInstanceHandler"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "Errors"
      + namespace                             = "AWS/Lambda"
      + period                                = 300
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_autoscaling.aws_cloudwatch_metric_alarm.terminated_instance_lambda_max_duration_alarm[0] will be created
  + resource "aws_cloudwatch_metric_alarm" "terminated_instance_lambda_max_duration_alarm" {
      + actions_enabled                       = true
      + alarm_actions                         = (known after apply)
      + alarm_description                     = "Lambda duration over 15000ms"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_terminated_instance_lambda_duration_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "FunctionName" = "aggregation-service-dev-env-TerminatedInstanceHandler"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "Duration"
      + namespace                             = "AWS/Lambda"
      + period                                = 300
      + statistic                             = "Maximum"
      + tags_all                              = (known after apply)
      + threshold                             = 15000
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_autoscaling.aws_iam_policy.asg_capacity_autoscaling_group_policy will be created
  + resource "aws_iam_policy" "asg_capacity_autoscaling_group_policy" {
      + arn       = (known after apply)
      + id        = (known after apply)
      + name      = (known after apply)
      + path      = "/"
      + policy    = (known after apply)
      + policy_id = (known after apply)
      + tags_all  = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.aws_iam_policy.lambda_log_policy will be created
  + resource "aws_iam_policy" "lambda_log_policy" {
      + arn       = (known after apply)
      + id        = (known after apply)
      + name      = (known after apply)
      + path      = "/"
      + policy    = jsonencode(
            {
              + Statement = [
                  + {
                      + Action   = [
                          + "logs:CreateLogGroup",
                          + "logs:CreateLogStream",
                          + "logs:PutLogEvents",
                        ]
                      + Effect   = "Allow"
                      + Resource = "*"
                    },
                ]
              + Version   = "2012-10-17"
            }
        )
      + policy_id = (known after apply)
      + tags_all  = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.aws_iam_policy.sqs_get_attribute_access will be created
  + resource "aws_iam_policy" "sqs_get_attribute_access" {
      + arn       = (known after apply)
      + id        = (known after apply)
      + name      = (known after apply)
      + path      = "/"
      + policy    = (known after apply)
      + policy_id = (known after apply)
      + tags_all  = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.aws_iam_policy.terminated_instance_asginstances_db_policy will be created
  + resource "aws_iam_policy" "terminated_instance_asginstances_db_policy" {
      + arn       = (known after apply)
      + id        = (known after apply)
      + name      = (known after apply)
      + path      = "/"
      + policy    = (known after apply)
      + policy_id = (known after apply)
      + tags_all  = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.aws_iam_policy.terminated_instance_autoscaling_group_policy will be created
  + resource "aws_iam_policy" "terminated_instance_autoscaling_group_policy" {
      + arn       = (known after apply)
      + id        = (known after apply)
      + name      = (known after apply)
      + path      = "/"
      + policy    = (known after apply)
      + policy_id = (known after apply)
      + tags_all  = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.aws_iam_role.asg_capacity_lambda_role will be created
  + resource "aws_iam_role" "asg_capacity_lambda_role" {
      + arn                   = (known after apply)
      + assume_role_policy    = jsonencode(
            {
              + Statement = [
                  + {
                      + Action    = "sts:AssumeRole"
                      + Effect    = "Allow"
                      + Principal = {
                          + Service = "lambda.amazonaws.com"
                        }
                    },
                ]
              + Version   = "2012-10-17"
            }
        )
      + create_date           = (known after apply)
      + force_detach_policies = false
      + id                    = (known after apply)
      + managed_policy_arns   = (known after apply)
      + max_session_duration  = 3600
      + name                  = "aggregation-service-dev-env-AsgCapacityLambdaRole"
      + name_prefix           = (known after apply)
      + path                  = "/"
      + tags_all              = (known after apply)
      + unique_id             = (known after apply)

      + inline_policy {
          + name   = (known after apply)
          + policy = (known after apply)
        }
    }

  # module.operator_service.module.worker_autoscaling.aws_iam_role.terminated_instance_lambda_role will be created
  + resource "aws_iam_role" "terminated_instance_lambda_role" {
      + arn                   = (known after apply)
      + assume_role_policy    = jsonencode(
            {
              + Statement = [
                  + {
                      + Action    = "sts:AssumeRole"
                      + Effect    = "Allow"
                      + Principal = {
                          + Service = "lambda.amazonaws.com"
                        }
                    },
                ]
              + Version   = "2012-10-17"
            }
        )
      + create_date           = (known after apply)
      + force_detach_policies = false
      + id                    = (known after apply)
      + managed_policy_arns   = (known after apply)
      + max_session_duration  = 3600
      + name                  = "aggregation-service-dev-env-TerminatedInstanceLambdaRole"
      + name_prefix           = (known after apply)
      + path                  = "/"
      + tags_all              = (known after apply)
      + unique_id             = (known after apply)

      + inline_policy {
          + name   = (known after apply)
          + policy = (known after apply)
        }
    }

  # module.operator_service.module.worker_autoscaling.aws_iam_role_policy_attachment.asg_capacity_lambda_log_policy_attachment will be created
  + resource "aws_iam_role_policy_attachment" "asg_capacity_lambda_log_policy_attachment" {
      + id         = (known after apply)
      + policy_arn = (known after apply)
      + role       = "aggregation-service-dev-env-AsgCapacityLambdaRole"
    }

  # module.operator_service.module.worker_autoscaling.aws_iam_role_policy_attachment.autoscaling_group_policy_attachment will be created
  + resource "aws_iam_role_policy_attachment" "autoscaling_group_policy_attachment" {
      + id         = (known after apply)
      + policy_arn = (known after apply)
      + role       = "aggregation-service-dev-env-AsgCapacityLambdaRole"
    }

  # module.operator_service.module.worker_autoscaling.aws_iam_role_policy_attachment.sqs_get_attribute_policy_attachment will be created
  + resource "aws_iam_role_policy_attachment" "sqs_get_attribute_policy_attachment" {
      + id         = (known after apply)
      + policy_arn = (known after apply)
      + role       = "aggregation-service-dev-env-AsgCapacityLambdaRole"
    }

  # module.operator_service.module.worker_autoscaling.aws_iam_role_policy_attachment.terminated_instance_asginstances_db_policy_attachment will be created
  + resource "aws_iam_role_policy_attachment" "terminated_instance_asginstances_db_policy_attachment" {
      + id         = (known after apply)
      + policy_arn = (known after apply)
      + role       = "aggregation-service-dev-env-TerminatedInstanceLambdaRole"
    }

  # module.operator_service.module.worker_autoscaling.aws_iam_role_policy_attachment.terminated_instance_autoscaling_group_policy_attachment will be created
  + resource "aws_iam_role_policy_attachment" "terminated_instance_autoscaling_group_policy_attachment" {
      + id         = (known after apply)
      + policy_arn = (known after apply)
      + role       = "aggregation-service-dev-env-TerminatedInstanceLambdaRole"
    }

  # module.operator_service.module.worker_autoscaling.aws_iam_role_policy_attachment.terminated_instance_lambda_log_policy_attachment will be created
  + resource "aws_iam_role_policy_attachment" "terminated_instance_lambda_log_policy_attachment" {
      + id         = (known after apply)
      + policy_arn = (known after apply)
      + role       = "aggregation-service-dev-env-TerminatedInstanceLambdaRole"
    }

  # module.operator_service.module.worker_autoscaling.aws_lambda_function.asg_capacity_lambda will be created
  + resource "aws_lambda_function" "asg_capacity_lambda" {
      + architectures                  = (known after apply)
      + arn                            = (known after apply)
      + function_name                  = "aggregation-service-dev-env-AsgCapacityHandler"
      + handler                        = "com.google.scp.operator.autoscaling.app.aws.AsgCapacityHandler"
      + id                             = (known after apply)
      + invoke_arn                     = (known after apply)
      + last_modified                  = (known after apply)
      + memory_size                    = 1024
      + package_type                   = "Zip"
      + publish                        = false
      + qualified_arn                  = (known after apply)
      + reserved_concurrent_executions = -1
      + role                           = (known after apply)
      + runtime                        = "java11"
      + s3_bucket                      = (known after apply)
      + s3_key                         = "app/asg_capacity_handler_lambda.jar"
      + signing_job_arn                = (known after apply)
      + signing_profile_version_arn    = (known after apply)
      + source_code_hash               = "SkxWtwrit+D89kyEWvQVP0cBqTFfgwR56MIMzPS6rGE="
      + source_code_size               = (known after apply)
      + tags                           = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-AsgCapacityHandler"
          + "role"        = "asg-capacity-handler"
          + "service"     = "operator-service"
        }
      + tags_all                       = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-AsgCapacityHandler"
          + "role"        = "asg-capacity-handler"
          + "service"     = "operator-service"
        }
      + timeout                        = 30
      + version                        = (known after apply)

      + environment {
          + variables = (known after apply)
        }

      + tracing_config {
          + mode = (known after apply)
        }
    }

  # module.operator_service.module.worker_autoscaling.aws_lambda_function.terminated_instance_lambda will be created
  + resource "aws_lambda_function" "terminated_instance_lambda" {
      + architectures                  = (known after apply)
      + arn                            = (known after apply)
      + function_name                  = "aggregation-service-dev-env-TerminatedInstanceHandler"
      + handler                        = "com.google.scp.operator.autoscaling.app.aws.TerminatedInstanceHandler"
      + id                             = (known after apply)
      + invoke_arn                     = (known after apply)
      + last_modified                  = (known after apply)
      + memory_size                    = 1024
      + package_type                   = "Zip"
      + publish                        = false
      + qualified_arn                  = (known after apply)
      + reserved_concurrent_executions = -1
      + role                           = (known after apply)
      + runtime                        = "java11"
      + s3_bucket                      = (known after apply)
      + s3_key                         = "app/terminated_instance_handler_lambda.jar"
      + signing_job_arn                = (known after apply)
      + signing_profile_version_arn    = (known after apply)
      + source_code_hash               = "MzWVWJwyOjvWWk+C/RBAEZ6/PtmSbDntwdjyLXPbyFk="
      + source_code_size               = (known after apply)
      + tags                           = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-TerminatedInstanceHandler"
          + "role"        = "terminated-instance-handler"
          + "service"     = "operator-service"
        }
      + tags_all                       = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-TerminatedInstanceHandler"
          + "role"        = "terminated-instance-handler"
          + "service"     = "operator-service"
        }
      + timeout                        = 30
      + version                        = (known after apply)

      + environment {
          + variables = (known after apply)
        }

      + tracing_config {
          + mode = (known after apply)
        }
    }

  # module.operator_service.module.worker_autoscaling.aws_lambda_permission.asg_capacity_lambda_permission will be created
  + resource "aws_lambda_permission" "asg_capacity_lambda_permission" {
      + action        = "lambda:InvokeFunction"
      + function_name = "aggregation-service-dev-env-AsgCapacityHandler"
      + id            = (known after apply)
      + principal     = "events.amazonaws.com"
      + source_arn    = (known after apply)
      + statement_id  = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.aws_lambda_permission.terminated_instance_lambda_permission will be created
  + resource "aws_lambda_permission" "terminated_instance_lambda_permission" {
      + action        = "lambda:InvokeFunction"
      + function_name = "aggregation-service-dev-env-TerminatedInstanceHandler"
      + id            = (known after apply)
      + principal     = "events.amazonaws.com"
      + source_arn    = (known after apply)
      + statement_id  = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.aws_s3_bucket.lambda_package_storage will be created
  + resource "aws_s3_bucket" "lambda_package_storage" {
      + acceleration_status         = (known after apply)
      + acl                         = "private"
      + arn                         = (known after apply)
      + bucket                      = (known after apply)
      + bucket_domain_name          = (known after apply)
      + bucket_prefix               = "aggregation-service-dev-env-worker-"
      + bucket_regional_domain_name = (known after apply)
      + force_destroy               = false
      + hosted_zone_id              = (known after apply)
      + id                          = (known after apply)
      + object_lock_enabled         = (known after apply)
      + region                      = (known after apply)
      + request_payer               = (known after apply)
      + tags                        = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-worker-"
          + "role"        = "worker-lambda-package-storage"
          + "service"     = "operator-service"
        }
      + tags_all                    = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "aggregation-service-dev-env-worker-"
          + "role"        = "worker-lambda-package-storage"
          + "service"     = "operator-service"
        }
      + website_domain              = (known after apply)
      + website_endpoint            = (known after apply)

      + object_lock_configuration {
          + object_lock_enabled = (known after apply)

          + rule {
              + default_retention {
                  + days  = (known after apply)
                  + mode  = (known after apply)
                  + years = (known after apply)
                }
            }
        }

      + server_side_encryption_configuration {
          + rule {
              + bucket_key_enabled = (known after apply)

              + apply_server_side_encryption_by_default {
                  + kms_master_key_id = (known after apply)
                  + sse_algorithm     = (known after apply)
                }
            }
        }

      + versioning {
          + enabled    = (known after apply)
          + mfa_delete = (known after apply)
        }
    }

  # module.operator_service.module.worker_autoscaling.aws_s3_bucket_object.asg_capacity_handler_lambda_s3_jar will be created
  + resource "aws_s3_bucket_object" "asg_capacity_handler_lambda_s3_jar" {
      + acl                    = "private"
      + bucket                 = (known after apply)
      + bucket_key_enabled     = (known after apply)
      + content_type           = (known after apply)
      + etag                   = (known after apply)
      + force_destroy          = false
      + id                     = (known after apply)
      + key                    = "app/asg_capacity_handler_lambda.jar"
      + kms_key_id             = (known after apply)
      + server_side_encryption = (known after apply)
      + source                 = "../../jars/AsgCapacityHandlerLambda_2.0.0.jar"
      + source_hash            = "d962cf8aa4ef178ec7e341a8bd32d9db"
      + storage_class          = (known after apply)
      + tags_all               = (known after apply)
      + version_id             = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.aws_s3_bucket_object.terminated_instance_handler_lambda_s3_jar will be created
  + resource "aws_s3_bucket_object" "terminated_instance_handler_lambda_s3_jar" {
      + acl                    = "private"
      + bucket                 = (known after apply)
      + bucket_key_enabled     = (known after apply)
      + content_type           = (known after apply)
      + etag                   = (known after apply)
      + force_destroy          = false
      + id                     = (known after apply)
      + key                    = "app/terminated_instance_handler_lambda.jar"
      + kms_key_id             = (known after apply)
      + server_side_encryption = (known after apply)
      + source                 = "../../jars/TerminatedInstanceHandlerLambda_2.0.0.jar"
      + source_hash            = "124c38740d8b30f1b2dfe4d3fe21ab4d"
      + storage_class          = (known after apply)
      + tags_all               = (known after apply)
      + version_id             = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.aws_s3_bucket_policy.lambda_package_storage_bucket_deny_non_ssl_requests will be created
  + resource "aws_s3_bucket_policy" "lambda_package_storage_bucket_deny_non_ssl_requests" {
      + bucket = (known after apply)
      + id     = (known after apply)
      + policy = (known after apply)
    }

  # module.operator_service.module.worker_dashboard.aws_cloudwatch_dashboard.worker-dashboard will be created
  + resource "aws_cloudwatch_dashboard" "worker-dashboard" {
      + dashboard_arn  = (known after apply)
      + dashboard_body = jsonencode(
            {
              + widgets = [
                  + {
                      + height     = 2
                      + properties = {
                          + alarms = [
                              + "arn:aws:cloudwatch:us-west-2:771945457201:alarm:aggregation-service-dev-env_us-west-2_job_validation_failure_composite_alarm",
                            ]
                          + title  = "Job Validation Failure Alarm"
                        }
                      + type       = "alarm"
                      + width      = 6
                      + x          = 6
                      + y          = 0
                    },
                  + {
                      + height     = 2
                      + properties = {
                          + alarms = [
                              + "arn:aws:cloudwatch:us-west-2:771945457201:alarm:aggregation-service-dev-env_us-west-2_job_client_composite_alarm",
                            ]
                          + title  = "Job Client Alarm"
                        }
                      + type       = "alarm"
                      + width      = 6
                      + x          = 12
                      + y          = 0
                    },
                  + {
                      + height     = 2
                      + properties = {
                          + alarms = [
                              + "arn:aws:cloudwatch:us-west-2:771945457201:alarm:aggregation-service-dev-env_us-west-2_worker_job_error_composite_alarm",
                            ]
                          + title  = "Worker Job Error Alarm"
                        }
                      + type       = "alarm"
                      + width      = 6
                      + x          = 18
                      + y          = 0
                    },
                  + {
                      + height     = 6
                      + properties = {
                          + annotations = {
                              + alarms = [
                                  + "arn:aws:cloudwatch:us-west-2:771945457201:alarm:aggregation-service-dev-env_us-west-2_job_queue_old_message_alarm",
                                ]
                            }
                          + stacked     = false
                          + title       = "Job Queue Oldest Message Age"
                          + view        = "timeSeries"
                        }
                      + type       = "metric"
                      + width      = 6
                      + x          = 12
                      + y          = 2
                    },
                  + {
                      + height     = 6
                      + properties = {
                          + metrics = [
                              + [
                                  + "AWS/SQS",
                                  + "ApproximateNumberOfMessagesNotVisible",
                                  + "QueueName",
                                  + "aggregation-service-dev-env-JobQueue",
                                ],
                              + [
                                  + ".",
                                  + "ApproximateNumberOfMessagesVisible",
                                  + ".",
                                  + "aggregation-service-dev-env-JobQueue",
                                ],
                            ]
                          + period  = 300
                          + region  = "us-west-2"
                          + stacked = false
                          + title   = "Job Queue Messages In-Flight"
                          + view    = "timeSeries"
                        }
                      + type       = "metric"
                      + width      = 6
                      + x          = 0
                      + y          = 2
                    },
                  + {
                      + height     = 6
                      + properties = {
                          + metrics = [
                              + [
                                  + "AWS/SQS",
                                  + "NumberOfMessagesSent",
                                  + "QueueName",
                                  + "aggregation-service-dev-env-JobQueue",
                                  + {
                                      + id = "m1"
                                    },
                                ],
                              + [
                                  + ".",
                                  + "NumberOfMessagesReceived",
                                  + ".",
                                  + ".",
                                  + {
                                      + id = "m2"
                                    },
                                ],
                              + [
                                  + ".",
                                  + "NumberOfMessagesDeleted",
                                  + ".",
                                  + ".",
                                  + {
                                      + id = "m3"
                                    },
                                ],
                            ]
                          + period  = 300
                          + region  = "us-west-2"
                          + stacked = false
                          + stat    = "Sum"
                          + title   = "Job Queue Message Sent/Received/Deleted"
                          + view    = "timeSeries"
                        }
                      + type       = "metric"
                      + width      = 6
                      + x          = 6
                      + y          = 2
                    },
                  + {
                      + height     = 6
                      + properties = {
                          + annotations = {
                              + alarms = [
                                  + "arn:aws:cloudwatch:us-west-2:771945457201:alarm:aggregation-service-dev-env_us-west-2_asg_max_instance_alarm",
                                ]
                            }
                          + stacked     = false
                          + title       = "Autoscaling Max Instance Alarm"
                          + view        = "timeSeries"
                        }
                      + type       = "metric"
                      + width      = 6
                      + x          = 0
                      + y          = 8
                    },
                  + {
                      + height     = 6
                      + properties = {
                          + metrics = [
                              + [
                                  + "AWS/AutoScaling",
                                  + "GroupInServiceInstances",
                                  + "AutoScalingGroupName",
                                  + "aggregation-service-dev-env-aggregation-service-workers",
                                ],
                              + [
                                  + ".",
                                  + "GroupTotalInstances",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "GroupPendingInstances",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "GroupTerminatingInstances",
                                  + ".",
                                  + ".",
                                ],
                            ]
                          + region  = "us-west-2"
                          + stacked = false
                          + title   = "Autoscaling Instances"
                          + view    = "timeSeries"
                        }
                      + type       = "metric"
                      + width      = 6
                      + x          = 18
                      + y          = 2
                    },
                  + {
                      + height     = 6
                      + properties = {
                          + metrics = [
                              + [
                                  + "AWS/Lambda",
                                  + "Errors",
                                  + "FunctionName",
                                  + "aggregation-service-dev-env-TerminatedInstanceHandler",
                                ],
                              + [
                                  + "...",
                                  + "aggregation-service-dev-env-AsgCapacityHandler",
                                ],
                            ]
                          + period  = 300
                          + region  = "us-west-2"
                          + stacked = false
                          + stat    = "Sum"
                          + title   = "Lambda Errors"
                          + view    = "timeSeries"
                        }
                      + type       = "metric"
                      + width      = 6
                      + x          = 12
                      + y          = 8
                    },
                  + {
                      + height     = 2
                      + properties = {
                          + alarms = [
                              + "arn:aws:cloudwatch:us-west-2:771945457201:alarm:aggregation-service-dev-env_us-west-2_worker_service_composite_alarm",
                            ]
                          + title  = "Worker Service Alarm"
                        }
                      + type       = "alarm"
                      + width      = 6
                      + x          = 0
                      + y          = 0
                    },
                  + {
                      + height     = 6
                      + properties = {
                          + end     = "P0D"
                          + metrics = [
                              + [
                                  + "AWS/Lambda",
                                  + "Invocations",
                                  + "FunctionName",
                                  + "aggregation-service-dev-env-AsgCapacityHandler",
                                  + "Resource",
                                  + "aggregation-service-dev-env-AsgCapacityHandler",
                                  + {
                                      + label = "aggregation-service-dev-env-AsgCapacityHandler"
                                    },
                                ],
                              + [
                                  + "...",
                                  + "aggregation-service-dev-env-TerminatedInstanceHandler",
                                  + ".",
                                  + "aggregation-service-dev-env-TerminatedInstanceHandler",
                                  + {
                                      + label = "aggregation-service-dev-env-TerminatedInstanceHandler"
                                    },
                                ],
                            ]
                          + period  = 300
                          + region  = "us-west-2"
                          + stacked = false
                          + start   = "-PT3H"
                          + stat    = "Sum"
                          + title   = "Lambda Invocations"
                          + view    = "timeSeries"
                        }
                      + type       = "metric"
                      + width      = 6
                      + x          = 6
                      + y          = 8
                    },
                  + {
                      + height     = 6
                      + properties = {
                          + end     = "P0D"
                          + metrics = [
                              + [
                                  + "AWS/Lambda",
                                  + "Throttles",
                                  + "FunctionName",
                                  + "aggregation-service-dev-env-AsgCapacityHandler",
                                ],
                              + [
                                  + "...",
                                  + "aggregation-service-dev-env-TerminatedInstanceHandler",
                                ],
                            ]
                          + period  = 300
                          + region  = "us-west-2"
                          + stacked = false
                          + start   = "-PT3H"
                          + stat    = "Sum"
                          + title   = "Lambda Throttling"
                          + view    = "timeSeries"
                        }
                      + type       = "metric"
                      + width      = 6
                      + x          = 18
                      + y          = 8
                    },
                  + {
                      + height     = 6
                      + properties = {
                          + end     = "P0D"
                          + metrics = [
                              + [
                                  + "AWS/Lambda",
                                  + "Duration",
                                  + "FunctionName",
                                  + "aggregation-service-dev-env-AsgCapacityHandler",
                                ],
                              + [
                                  + "...",
                                  + "aggregation-service-dev-env-TerminatedInstanceHandler",
                                ],
                            ]
                          + region  = "us-west-2"
                          + stacked = false
                          + start   = "-PT3H"
                          + title   = "Lambda Duration"
                          + view    = "timeSeries"
                        }
                      + type       = "metric"
                      + width      = 6
                      + x          = 0
                      + y          = 14
                    },
                ]
            }
        )
      + dashboard_name = "aggregation-service-dev-env-worker-dashboard"
      + id             = (known after apply)
    }

  # module.operator_service.module.worker_service.data.aws_iam_policy_document.enclave_policy_doc will be read during apply
  # (config refers to values not yet known)
 <= data "aws_iam_policy_document" "enclave_policy_doc" {
      + id   = (known after apply)
      + json = (known after apply)

      + statement {
          + actions   = [
              + "sts:AssumeRole",
            ]
          + effect    = "Allow"
          + resources = [
              + "arn:aws:iam::850159350730:role/a_771945457201_coordinator_assume_role",
            ]
          + sid       = "AllowAssumeRole"
        }
      + statement {
          + actions   = [
              + "sqs:ChangeMessageVisibility",
              + "sqs:DeleteMessage",
              + "sqs:ReceiveMessage",
              + "sqs:SendMessage",
            ]
          + effect    = "Allow"
          + resources = [
              + (known after apply),
            ]
          + sid       = "AllowSelectActionsOnSqsQueue"
        }
      + statement {
          + actions   = [
              + "autoscaling:CompleteLifecycleAction",
              + "autoscaling:DescribeAutoScalingInstances",
              + "autoscaling:RecordLifecycleActionHeartbeat",
              + "autoscaling:SetInstanceHealth",
              + "ec2:DescribeTags",
            ]
          + effect    = "Allow"
          + resources = [
              + "*",
            ]
          + sid       = "AllowCoreEc2AutoscalingActions"
        }
      + statement {
          + actions   = [
              + "ssm:GetParameters",
            ]
          + effect    = "Allow"
          + resources = [
              + "arn:aws:ssm:*:*:parameter/*",
            ]
          + sid       = "AllowSsmGetParameters"
        }
      + statement {
          + actions   = [
              + "cloudwatch:PutMetricData",
            ]
          + effect    = "Allow"
          + resources = [
              + "*",
            ]
          + sid       = "AllowCloudWatchPutMetricData"
        }
      + statement {
          + actions   = [
              + "dynamodb:ConditionCheckItem",
              + "dynamodb:GetItem",
              + "dynamodb:PutItem",
            ]
          + effect    = "Allow"
          + resources = [
              + (known after apply),
              + (known after apply),
            ]
          + sid       = "AllowDdbAccessFromSpecificVPCe"

          + condition {
              + test     = "StringEquals"
              + values   = [
                  + (known after apply),
                ]
              + variable = "aws:sourceVpce"
            }
        }
      + statement {
          + actions   = [
              + "dynamodb:*",
            ]
          + effect    = "Deny"
          + resources = [
              + (known after apply),
              + (known after apply),
            ]
          + sid       = "DenyDdbAccessFromAnyOtherEndpoints"

          + condition {
              + test     = "StringNotEquals"
              + values   = [
                  + (known after apply),
                ]
              + variable = "aws:sourceVpce"
            }
        }
      + statement {
          + actions   = [
              + "s3:DeleteObject",
              + "s3:GetObject",
              + "s3:ListBucket",
              + "s3:PutObject",
            ]
          + effect    = "Allow"
          + resources = [
              + "*",
            ]
          + sid       = "AllowS3AccessFromSpecificVPCe"

          + condition {
              + test     = "StringEquals"
              + values   = [
                  + (known after apply),
                ]
              + variable = "aws:sourceVpce"
            }
        }
      + statement {
          + actions   = [
              + "s3:*",
            ]
          + effect    = "Deny"
          + resources = [
              + "*",
            ]
          + sid       = "DenyS3AccessFromAnyOtherEndpoints"

          + condition {
              + test     = "StringNotEquals"
              + values   = [
                  + (known after apply),
                ]
              + variable = "aws:sourceVpce"
            }
        }
      + statement {
          + actions   = [
              + "logs:CreateLogGroup",
              + "logs:CreateLogStream",
              + "logs:PutLogEvents",
              + "xray:PutTelemetryRecords",
              + "xray:PutTraceSegments",
            ]
          + effect    = "Allow"
          + resources = [
              + "*",
            ]
          + sid       = "AllowOTelAccess"
        }
      + statement {
          + actions   = [
              + "sts:AssumeRole",
            ]
          + effect    = "Allow"
          + resources = [
              + "arn:aws:iam::311771262672:role/b_771945457201_coordinator_assume_role",
            ]
        }
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_composite_alarm.job_client_error_composite_alarm[0] will be created
  + resource "aws_cloudwatch_composite_alarm" "job_client_error_composite_alarm" {
      + actions_enabled   = true
      + alarm_description = "Job client exception composite alarm"
      + alarm_name        = "aggregation-service-dev-env_us-west-2_job_client_composite_alarm"
      + alarm_rule        = "ALARM(aggregation-service-dev-env_us-west-2_JOB_MARK_COMPLETION_FAILED_job_client_alarm) OR ALARM(aggregation-service-dev-env_us-west-2_JOB_METADATA_NOT_FOUND_job_client_alarm) OR ALARM(aggregation-service-dev-env_us-west-2_JOB_PULL_FAILED_job_client_alarm) OR ALARM(aggregation-service-dev-env_us-west-2_JOB_RECEIPT_HANDLE_NOT_FOUND_job_client_alarm) OR ALARM(aggregation-service-dev-env_us-west-2_UNSPECIFIED_ERROR_job_client_alarm) OR ALARM(aggregation-service-dev-env_us-west-2_WRONG_JOB_STATUS_job_client_alarm)"
      + arn               = (known after apply)
      + id                = (known after apply)
      + tags_all          = (known after apply)
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_composite_alarm.job_validation_failure_composite_alarm[0] will be created
  + resource "aws_cloudwatch_composite_alarm" "job_validation_failure_composite_alarm" {
      + actions_enabled   = true
      + alarm_description = "Job validation failure composite alarm"
      + alarm_name        = "aggregation-service-dev-env_us-west-2_job_validation_failure_composite_alarm"
      + alarm_rule        = "ALARM(aggregation-service-dev-env_us-west-2_JobValidatorCheckDuplicate_job_validation_failure_alarm) OR ALARM(aggregation-service-dev-env_us-west-2_JobValidatorCheckFields_job_validation_failure_alarm) OR ALARM(aggregation-service-dev-env_us-west-2_JobValidatorCheckRetryLimit_job_validation_failure_alarm) OR ALARM(aggregation-service-dev-env_us-west-2_JobValidatorCheckStatus_job_validation_failure_alarm)"
      + arn               = (known after apply)
      + id                = (known after apply)
      + tags_all          = (known after apply)
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_composite_alarm.worker_composite_alarm[0] will be created
  + resource "aws_cloudwatch_composite_alarm" "worker_composite_alarm" {
      + actions_enabled   = true
      + alarm_actions     = (known after apply)
      + alarm_description = "Entire worker service composite alarm"
      + alarm_name        = "aggregation-service-dev-env_us-west-2_worker_service_composite_alarm"
      + alarm_rule        = "ALARM(aggregation-service-dev-env_us-west-2_job_client_composite_alarm) OR ALARM(aggregation-service-dev-env_us-west-2_job_validation_failure_composite_alarm) OR ALARM(aggregation-service-dev-env_us-west-2_worker_job_error_composite_alarm)"
      + arn               = (known after apply)
      + id                = (known after apply)
      + tags_all          = (known after apply)
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_composite_alarm.worker_job_error_composite_alarm[0] will be created
  + resource "aws_cloudwatch_composite_alarm" "worker_job_error_composite_alarm" {
      + actions_enabled   = true
      + alarm_description = "Worker job error alarm composite alarm"
      + alarm_name        = "aggregation-service-dev-env_us-west-2_worker_job_error_composite_alarm"
      + alarm_rule        = "ALARM(aggregation-service-dev-env_us-west-2_JobHandlingError_worker_job_alarm)"
      + arn               = (known after apply)
      + id                = (known after apply)
      + tags_all          = (known after apply)
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_metric_alarm.job_client_error_alarm["JOB_MARK_COMPLETION_FAILED"] will be created
  + resource "aws_cloudwatch_metric_alarm" "job_client_error_alarm" {
      + actions_enabled                       = true
      + alarm_description                     = "Job client exception alarm for JOB_MARK_COMPLETION_FAILED"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_JOB_MARK_COMPLETION_FAILED_job_client_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "ErrorReason" = "JOB_MARK_COMPLETION_FAILED"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "JobClientError"
      + namespace                             = "aggregation-service-dev-env/scp/jobclient"
      + period                                = 300
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_metric_alarm.job_client_error_alarm["JOB_METADATA_NOT_FOUND"] will be created
  + resource "aws_cloudwatch_metric_alarm" "job_client_error_alarm" {
      + actions_enabled                       = true
      + alarm_description                     = "Job client exception alarm for JOB_METADATA_NOT_FOUND"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_JOB_METADATA_NOT_FOUND_job_client_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "ErrorReason" = "JOB_METADATA_NOT_FOUND"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "JobClientError"
      + namespace                             = "aggregation-service-dev-env/scp/jobclient"
      + period                                = 300
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_metric_alarm.job_client_error_alarm["JOB_PULL_FAILED"] will be created
  + resource "aws_cloudwatch_metric_alarm" "job_client_error_alarm" {
      + actions_enabled                       = true
      + alarm_description                     = "Job client exception alarm for JOB_PULL_FAILED"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_JOB_PULL_FAILED_job_client_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "ErrorReason" = "JOB_PULL_FAILED"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "JobClientError"
      + namespace                             = "aggregation-service-dev-env/scp/jobclient"
      + period                                = 300
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_metric_alarm.job_client_error_alarm["JOB_RECEIPT_HANDLE_NOT_FOUND"] will be created
  + resource "aws_cloudwatch_metric_alarm" "job_client_error_alarm" {
      + actions_enabled                       = true
      + alarm_description                     = "Job client exception alarm for JOB_RECEIPT_HANDLE_NOT_FOUND"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_JOB_RECEIPT_HANDLE_NOT_FOUND_job_client_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "ErrorReason" = "JOB_RECEIPT_HANDLE_NOT_FOUND"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "JobClientError"
      + namespace                             = "aggregation-service-dev-env/scp/jobclient"
      + period                                = 300
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_metric_alarm.job_client_error_alarm["UNSPECIFIED_ERROR"] will be created
  + resource "aws_cloudwatch_metric_alarm" "job_client_error_alarm" {
      + actions_enabled                       = true
      + alarm_description                     = "Job client exception alarm for UNSPECIFIED_ERROR"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_UNSPECIFIED_ERROR_job_client_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "ErrorReason" = "UNSPECIFIED_ERROR"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "JobClientError"
      + namespace                             = "aggregation-service-dev-env/scp/jobclient"
      + period                                = 300
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_metric_alarm.job_client_error_alarm["WRONG_JOB_STATUS"] will be created
  + resource "aws_cloudwatch_metric_alarm" "job_client_error_alarm" {
      + actions_enabled                       = true
      + alarm_description                     = "Job client exception alarm for WRONG_JOB_STATUS"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_WRONG_JOB_STATUS_job_client_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "ErrorReason" = "WRONG_JOB_STATUS"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "JobClientError"
      + namespace                             = "aggregation-service-dev-env/scp/jobclient"
      + period                                = 300
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_metric_alarm.job_validation_failure_alarm["JobValidatorCheckDuplicate"] will be created
  + resource "aws_cloudwatch_metric_alarm" "job_validation_failure_alarm" {
      + actions_enabled                       = true
      + alarm_description                     = "Job validation failure alarm for JobValidatorCheckDuplicate"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_JobValidatorCheckDuplicate_job_validation_failure_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "Validator" = "JobValidatorCheckDuplicate"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "JobValidationFailure"
      + namespace                             = "aggregation-service-dev-env/scp/jobclient"
      + period                                = 300
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_metric_alarm.job_validation_failure_alarm["JobValidatorCheckFields"] will be created
  + resource "aws_cloudwatch_metric_alarm" "job_validation_failure_alarm" {
      + actions_enabled                       = true
      + alarm_description                     = "Job validation failure alarm for JobValidatorCheckFields"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_JobValidatorCheckFields_job_validation_failure_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "Validator" = "JobValidatorCheckFields"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "JobValidationFailure"
      + namespace                             = "aggregation-service-dev-env/scp/jobclient"
      + period                                = 300
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_metric_alarm.job_validation_failure_alarm["JobValidatorCheckRetryLimit"] will be created
  + resource "aws_cloudwatch_metric_alarm" "job_validation_failure_alarm" {
      + actions_enabled                       = true
      + alarm_description                     = "Job validation failure alarm for JobValidatorCheckRetryLimit"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_JobValidatorCheckRetryLimit_job_validation_failure_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "Validator" = "JobValidatorCheckRetryLimit"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "JobValidationFailure"
      + namespace                             = "aggregation-service-dev-env/scp/jobclient"
      + period                                = 300
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_metric_alarm.job_validation_failure_alarm["JobValidatorCheckStatus"] will be created
  + resource "aws_cloudwatch_metric_alarm" "job_validation_failure_alarm" {
      + actions_enabled                       = true
      + alarm_description                     = "Job validation failure alarm for JobValidatorCheckStatus"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_JobValidatorCheckStatus_job_validation_failure_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "Validator" = "JobValidatorCheckStatus"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "JobValidationFailure"
      + namespace                             = "aggregation-service-dev-env/scp/jobclient"
      + period                                = 300
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_service.aws_cloudwatch_metric_alarm.worker_job_error_metric["JobHandlingError"] will be created
  + resource "aws_cloudwatch_metric_alarm" "worker_job_error_metric" {
      + actions_enabled                       = true
      + alarm_description                     = "General job processing exception alarm"
      + alarm_name                            = "aggregation-service-dev-env_us-west-2_JobHandlingError_worker_job_alarm"
      + arn                                   = (known after apply)
      + comparison_operator                   = "GreaterThanThreshold"
      + dimensions                            = {
          + "Type" = "JobHandlingError"
        }
      + evaluate_low_sample_count_percentiles = (known after apply)
      + evaluation_periods                    = 1
      + id                                    = (known after apply)
      + metric_name                           = "WorkerJobError"
      + namespace                             = "aggregation-service-dev-env/scp/worker"
      + period                                = 300
      + statistic                             = "Sum"
      + tags_all                              = (known after apply)
      + threshold                             = 0
      + treat_missing_data                    = "notBreaching"
    }

  # module.operator_service.module.worker_service.aws_iam_instance_profile.worker_profile will be created
  + resource "aws_iam_instance_profile" "worker_profile" {
      + arn         = (known after apply)
      + create_date = (known after apply)
      + id          = (known after apply)
      + name        = "aggregation-service-dev-env-AggregationServiceWorkerRoleProfile"
      + path        = "/"
      + role        = "aggregation-service-dev-env-AggregationServiceWorkerRole"
      + tags_all    = (known after apply)
      + unique_id   = (known after apply)
    }

  # module.operator_service.module.worker_service.aws_iam_role.enclave_role will be created
  + resource "aws_iam_role" "enclave_role" {
      + arn                   = (known after apply)
      + assume_role_policy    = jsonencode(
            {
              + Statement = [
                  + {
                      + Action    = "sts:AssumeRole"
                      + Effect    = "Allow"
                      + Principal = {
                          + Service = "ec2.amazonaws.com"
                        }
                      + Sid       = "AllowEc2AssumeRole"
                    },
                ]
              + Version   = "2012-10-17"
            }
        )
      + create_date           = (known after apply)
      + force_detach_policies = false
      + id                    = (known after apply)
      + managed_policy_arns   = [
          + "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore",
        ]
      + max_session_duration  = 3600
      + name                  = "aggregation-service-dev-env-AggregationServiceWorkerRole"
      + name_prefix           = (known after apply)
      + path                  = "/"
      + tags_all              = (known after apply)
      + unique_id             = (known after apply)

      + inline_policy {
          + name   = (known after apply)
          + policy = (known after apply)
        }
    }

  # module.operator_service.module.worker_service.aws_iam_role_policy.enclave_role_policy will be created
  + resource "aws_iam_role_policy" "enclave_role_policy" {
      + id     = (known after apply)
      + name   = (known after apply)
      + policy = (known after apply)
      + role   = (known after apply)
    }

  # module.operator_service.module.worker_service.aws_launch_template.worker_template will be created
  + resource "aws_launch_template" "worker_template" {
      + arn                    = (known after apply)
      + default_version        = (known after apply)
      + id                     = (known after apply)
      + image_id               = "ami-0cadbb1a3834f94f4"
      + instance_type          = "m5.2xlarge"
      + latest_version         = (known after apply)
      + name                   = "aggregation-service-dev-env-aggregation-service-template"
      + name_prefix            = (known after apply)
      + tags_all               = (known after apply)
      + vpc_security_group_ids = (known after apply)

      + credit_specification {
          + cpu_credits = "standard"
        }

      + enclave_options {
          + enabled = true
        }

      + iam_instance_profile {
          + name = "aggregation-service-dev-env-AggregationServiceWorkerRoleProfile"
        }

      + metadata_options {
          + http_endpoint               = "enabled"
          + http_protocol_ipv6          = "disabled"
          + http_put_response_hop_limit = (known after apply)
          + http_tokens                 = "required"
          + instance_metadata_tags      = "disabled"
        }

      + monitoring {
          + enabled = true
        }

      + tag_specifications {
          + resource_type = "instance"
          + tags          = {
              + "Name"               = "aggregation-service-aggregation-service-dev-env"
              + "enclave_cpu_count"  = "6"
              + "enclave_memory_mib" = "28672"
              + "environment"        = "aggregation-service-dev-env"
              + "service"            = "aggregation-service"
            }
        }
    }

  # module.operator_service.module.asginstances_db.module.asg_instances_table_parameter.aws_ssm_parameter.worker_parameter will be created
  + resource "aws_ssm_parameter" "worker_parameter" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-ASG_INSTANCES_TABLE_NAME"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-ASG_INSTANCES_TABLE_NAME"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-ASG_INSTANCES_TABLE_NAME"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.asginstances_db.module.asg_instances_table_parameter.aws_ssm_parameter.worker_parameter_legacy will be created
  + resource "aws_ssm_parameter" "worker_parameter_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/ASG_INSTANCES_TABLE_NAME"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/ASG_INSTANCES_TABLE_NAME"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/ASG_INSTANCES_TABLE_NAME"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.module.lifecycle_action_heartbeat_enabled_parameter.aws_ssm_parameter.worker_parameter will be created
  + resource "aws_ssm_parameter" "worker_parameter" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-LIFECYCLE_ACTION_HEARTBEAT_ENABLED"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-LIFECYCLE_ACTION_HEARTBEAT_ENABLED"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-LIFECYCLE_ACTION_HEARTBEAT_ENABLED"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.module.lifecycle_action_heartbeat_enabled_parameter.aws_ssm_parameter.worker_parameter_legacy will be created
  + resource "aws_ssm_parameter" "worker_parameter_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/LIFECYCLE_ACTION_HEARTBEAT_ENABLED"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/LIFECYCLE_ACTION_HEARTBEAT_ENABLED"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/LIFECYCLE_ACTION_HEARTBEAT_ENABLED"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.module.lifecycle_action_heartbeat_frequency_parameter.aws_ssm_parameter.worker_parameter will be created
  + resource "aws_ssm_parameter" "worker_parameter" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-LIFECYCLE_ACTION_HEARTBEAT_FREQUENCY"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-LIFECYCLE_ACTION_HEARTBEAT_FREQUENCY"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-LIFECYCLE_ACTION_HEARTBEAT_FREQUENCY"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.module.lifecycle_action_heartbeat_frequency_parameter.aws_ssm_parameter.worker_parameter_legacy will be created
  + resource "aws_ssm_parameter" "worker_parameter_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/LIFECYCLE_ACTION_HEARTBEAT_FREQUENCY"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/LIFECYCLE_ACTION_HEARTBEAT_FREQUENCY"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/LIFECYCLE_ACTION_HEARTBEAT_FREQUENCY"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.module.lifecycle_action_heartbeat_timeout_parameter.aws_ssm_parameter.worker_parameter will be created
  + resource "aws_ssm_parameter" "worker_parameter" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-LIFECYCLE_ACTION_HEARTBEAT_TIMEOUT"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-LIFECYCLE_ACTION_HEARTBEAT_TIMEOUT"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-LIFECYCLE_ACTION_HEARTBEAT_TIMEOUT"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.module.lifecycle_action_heartbeat_timeout_parameter.aws_ssm_parameter.worker_parameter_legacy will be created
  + resource "aws_ssm_parameter" "worker_parameter_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/LIFECYCLE_ACTION_HEARTBEAT_TIMEOUT"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/LIFECYCLE_ACTION_HEARTBEAT_TIMEOUT"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/LIFECYCLE_ACTION_HEARTBEAT_TIMEOUT"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.module.max_lifecycle_action_heartbeat_timeout_extension_parameter.aws_ssm_parameter.worker_parameter will be created
  + resource "aws_ssm_parameter" "worker_parameter" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-MAX_LIFECYCLE_ACTION_TIMEOUT_EXTENSION"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-MAX_LIFECYCLE_ACTION_TIMEOUT_EXTENSION"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-MAX_LIFECYCLE_ACTION_TIMEOUT_EXTENSION"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.module.max_lifecycle_action_heartbeat_timeout_extension_parameter.aws_ssm_parameter.worker_parameter_legacy will be created
  + resource "aws_ssm_parameter" "worker_parameter_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/MAX_LIFECYCLE_ACTION_TIMEOUT_EXTENSION"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/MAX_LIFECYCLE_ACTION_TIMEOUT_EXTENSION"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/MAX_LIFECYCLE_ACTION_TIMEOUT_EXTENSION"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.module.worker_autoscaling_group_parameter.aws_ssm_parameter.worker_parameter will be created
  + resource "aws_ssm_parameter" "worker_parameter" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-WORKER_AUTOSCALING_GROUP"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-WORKER_AUTOSCALING_GROUP"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-WORKER_AUTOSCALING_GROUP"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.module.worker_autoscaling_group_parameter.aws_ssm_parameter.worker_parameter_legacy will be created
  + resource "aws_ssm_parameter" "worker_parameter_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/WORKER_AUTOSCALING_GROUP"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/WORKER_AUTOSCALING_GROUP"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/WORKER_AUTOSCALING_GROUP"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.module.worker_scale_in_hook_parameter.aws_ssm_parameter.worker_parameter will be created
  + resource "aws_ssm_parameter" "worker_parameter" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "scp-aggregation-service-dev-env-SCALE_IN_HOOK"
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-SCALE_IN_HOOK"
          + "service"     = "operator-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "scp-aggregation-service-dev-env-SCALE_IN_HOOK"
          + "service"     = "operator-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

  # module.operator_service.module.worker_autoscaling.module.worker_scale_in_hook_parameter.aws_ssm_parameter.worker_parameter_legacy will be created
  + resource "aws_ssm_parameter" "worker_parameter_legacy" {
      + arn       = (known after apply)
      + data_type = (known after apply)
      + id        = (known after apply)
      + key_id    = (known after apply)
      + name      = "/aggregate-service/aggregation-service-dev-env/scale_in_hook"
      + overwrite = true
      + tags      = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/scale_in_hook"
          + "service"     = "aggregate-service"
        }
      + tags_all  = {
          + "environment" = "aggregation-service-dev-env"
          + "name"        = "/aggregate-service/aggregation-service-dev-env/scale_in_hook"
          + "service"     = "aggregate-service"
        }
      + tier      = "Standard"
      + type      = "String"
      + value     = (sensitive value)
      + version   = (known after apply)
    }

Plan: 191 to add, 0 to change, 0 to destroy.

Changes to Outputs:
  + create_job_endpoint = (known after apply)
  + frontend_api_id     = (known after apply)
  + get_job_endpoint    = (known after apply)
╷
│ Warning: Argument is deprecated
│ 
│   with module.operator_service.module.worker_autoscaling.aws_s3_bucket.lambda_package_storage,
│   on ../../coordinator-services-and-shared-libraries/operator/terraform/aws/modules/autoscaling/s3.tf line 20, in resource "aws_s3_bucket" "lambda_package_storage":
│   20:   acl           = "private"
│ 
│ Use the aws_s3_bucket_acl resource instead
│ 
│ (and 3 more similar warnings elsewhere)
╵

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't
guarantee to take exactly these actions if you run "terraform apply" now.
Releasing state lock. This may take a few moments...